Processing video recordings in research

You can anonymise a video recording by cartooning, censoring and/or distorting voices. This type of anonymisation may have a detrimental effect on what you want to see. The use of cartooning, for example, will therefore depend on the type of data concerned and what you want to achieve with the video recording.

You must be aware of what you do when handling recording equipment. Do not leave it in places where you do not have control over it, lock the office where it is stored, do not lend it to unauthorised persons etc.

Units that are connected to the internet, e.g. mobile phones and tablet computers, must never be used for video recording. Recording equipment that transfers the recording to local storage units such as memory cards or an internal hard disk are recommended. Basic good-resolution HDMI cameras with an extra microphone are very suitable. 

Memory cards or the disk in the sound recording equipment cannot normally be encrypted. The memory card/unit must be stored in a safe or similar. The recordings are transferred as quickly as possible to another form of (secure) storage. The recordings must be completely deleted when the video recorder is used in connection with a new project, see below about deletion of video recordings.

The recorder must be stored in a lockable cupboard when it is not in use, see below about storage of video recordings.

All video recordings that have not been anonymised or for which consent has not been given for public viewing must be stored and edited on stationary computers or laptops that are not connected to the internet. We recommend taking laptops to BIT for sealing (ensures that the computer cannot be connected to the internet).

You must ensure that no unauthorised persons are present in the room in which editing is taking place.

Data must be anonymised or deleted at the end of a project. This means that video recordings must be deleted. A memory card/memory stick cannot definitely be deleted. They are taken to bit@oslomet.no to ensure they are completely deleted. Complete deletion is achieved through the destruction of the storage unit, unless they are to be reused by the exact same person(s). For reuse by the exact same person(s), use the program CCleaner to remove the data from the memory card/memory stick.

Otherwise, see the information security guidelines on deletion and destruction.

If long-term storage of video recordings is desirable for the purpose of conducting follow-up studies (research purposes), you must apply for approval from Data Protection Services (Sikt) and REC.

If video recordings are to be used for other purposes after the end of the project, such as in teaching, it must be assessed whether the new purpose is compatible with the original purpose, what the legal basis should be, etc., and that the processing must be registered in Ardoq, see privacy procedures.

Video recordings should be stored on an encrypted memory pen or encrypted external hard disk. The units should be stored in a locked archive or a cupboard to which access is controlled. If the cupboard is in a room that is in general use, it is recommended that a safe or a cupboard with two doors be used to make it difficult to break into it. If the cupboard is stored in a room that is not in general use, an ordinary lockable cupboard may be sufficient. See also the information security guidelines on storing, sending, sharing and deleting (see Norwegian version).

• The cupboard must be fireproof and have smoke detectors and fire extinguishing equipment/a sprinkler system in the same room if the raw material is important in order to ensure verifiability.
• If video recordings are stored in the office, you must lock the office when you leave it, see also the information security guidelines on physical securing of OsloMet's premises (see Norwegian version).
• There should be a procedure for storing keys/key cards for doors and cupboards.
• You should log when, who and for which purpose each time you handle the video recordings.
• Alternatively, video recordings can be stored on Tjeneste for sensitive data / Service for sensitive data (TSD 2.0) (uio.no). Contact fou-teknisk@oslomet.no for more information.

If it is desirable to store the data for the future, video recordings can be stored by Data Protection Services (Sikt), see Sikt's web pages on archiving. They provide a description of how the data should be prepared for archiving with, among other things, a list of preferred file formats and the relevant documentation to be enclosed, what is to be filled in and signed, and how the data is transferred. 

Tutor video, sound and video recordings in the healthcare sector (ehelse.no, in Norwegian).