We Provide fast, secure, and UK GDPR-compliant masking PII in surveillance footage for SAR/DSAR video requests (GDPR-compliant video processing for DSARs - Data Subject Access Requests).
Blur faces and personally identifiable information (PII), distinguishing features, mask car number plates, censor screens, written notes, documents and security systems on CCTV, BWV (Body Worn Video from systems such as Reveal media, Axis, Axon, i-pro & Motorola), in car dashcam and mobile phone video footage.
Protecting your staff, customers and personal information.
Explore our guide on what to do when you receive a Data Subject Access Request (SAR/DSAR) in the UK.
There are two levels of CCTV video masking and redaction services on offer, with increasing enhanced security features, benefits and a transparent pricing structure for your convenience.
Footage is uploaded, manually processed remotely, and securely destroyed once complete.
From £4.50 per minute of footage
Footage collected in person, manually processed remotely and returned in person.
From £4.50 per minute of footage, 45p per mile to and from NG32
There is a minimum charge of £22.50 and all prices are subject to VAT.
Fully manual redaction – no missed faces.
No monthly subscription, or associated online data breach risks.
Ideal for SARs, DSARs, councils, schools, and private security.
UK-based, GDPR compliant, trusted, and secure.
One of the best redaction solutions for CCTV evidence submission
Please see our Data Processing Agreement in the drop down below which explains how Aquarius Creative Limited processes personal data when providing CCTV, video, and photographic redaction services on behalf of clients. DPA and redaction terms available as PDFs on request.
This Agreement is intended to satisfy the requirements of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 where Aquarius Creative Limited acts as a Data Processor on behalf of a client acting as the Data Controller.
Data Processor: Aquarius Creative Limited, Email: pete@aquariuscreative.uk
Data Controller: The client or organisation supplying CCTV footage, video files, photographs, or related media for processing services.
For the purposes of this Agreement, "Client" means the Data Controller engaging Aquarius Creative Limited to provide processing services.
Aquarius Creative Limited provides media redaction and editing services, including but not limited to:
CCTV redaction
Facial blurring
Vehicle registration redaction
Object or identity masking
Photo redaction and anonymisation
Video editing directly related to privacy compliance
Subject Access Request (SAR) preparation and redaction
Processing is carried out solely for the purpose of completing the services requested by the client.
The client remains the Data Controller and retains responsibility for:
Ensuring they have a lawful basis for collecting and sharing the footage or images;
Obtaining any necessary permissions or authorisations;
Responding to data subject requests;
Ensuring compliance with applicable privacy laws.
Aquarius Creative Limited acts only as a Data Processor and processes personal data solely in accordance with the client’s instructions.
By supplying files to Aquarius Creative Limited, the client confirms they are authorised to share the materials for processing purposes.
Aquarius Creative Limited provides technical redaction and editing services only and does not provide legal advice, compliance advice, or determinations regarding the disclosure of personal data.
The Data Controller remains solely responsible for:
Determining which information should be disclosed, withheld, redacted, anonymised, or retained;
Assessing compliance with the UK GDPR, Data Protection Act 2018, Freedom of Information legislation, Subject Access Requests, court orders, insurance requests, or any other disclosure obligations;
Providing clear written instructions regarding any required redactions.
Aquarius Creative Limited shall perform redaction work in accordance with the instructions supplied by the Data Controller.
The Data Controller is responsible for reviewing all redacted materials prior to disclosure or release to any third party and confirming that the completed redactions satisfy their legal and operational requirements.
Unless otherwise agreed in writing, delivery of redacted materials shall be deemed a draft for client review. The Data Controller remains responsible for confirming that all required redactions have been completed prior to disclosure or publication.
Aquarius Creative Limited reserves the right to decline any instruction that it reasonably believes may breach applicable law, court orders, regulatory requirements, or professional obligations.
The materials provided may contain personal data including:
Images or video recordings of identifiable individuals;
Vehicle registration numbers;
Audio recordings where applicable;
Location, date, and time information captured within media files.
No special category data is intentionally requested, although such data may incidentally appear within supplied footage.
Aquarius Creative Limited takes appropriate technical and organisational measures to protect personal data, including:
Encryption of locally stored files and transmitted data;
Secure handling of physical storage media;
Restricted access to files and projects;
Password-protected systems and devices;
Use of reputable file transfer and cloud storage providers where required for service delivery;
Reasonable steps to ensure that third-party providers maintain appropriate security measures and data protection standards;
Deletion of files once services are completed and payment obligations have been settled;
Access to client materials will be restricted to Aquarius Creative Limited personnel and approved service providers where access is necessary for the provision of the contracted services.
Clients may provide files through:
Secure digital transfer services;
Encrypted cloud sharing links;
Physical delivery or collection of storage media.
Aquarius Creative Limited will take reasonable steps to ensure that client data is stored and processed within the United Kingdom or in jurisdictions recognised as providing an adequate level of data protection under applicable data protection legislation.
Project files and related media are retained only for as long as reasonably necessary to:
Complete the agreed work;
Allow for revisions or amendments;
Confirm successful delivery;
Settle invoices and payment obligations.
Unless otherwise agreed in writing, project files will normally be deleted within 30 days of project completion and settlement of all invoices. Where a client requires a longer retention period, this must be agreed in writing prior to project completion.
Aquarius Creative Limited treats all client materials as confidential and will not disclose, share, or use supplied files for any purpose other than completing the contracted services, unless required by law.
Aquarius Creative Limited may use trusted third-party service providers solely for secure file transfer or temporary storage purposes, including but not limited to:
Such providers are used only where necessary for service delivery and are expected to maintain appropriate security standards.
In the event of a suspected personal data breach affecting client materials, Aquarius Creative Limited will notify the client without undue delay and provide reasonable cooperation in resolving the matter.
As Data Controller, the client remains responsible for responding to requests from individuals relating to their personal data, including access, erasure, or objection requests.
Aquarius Creative Limited will reasonably assist where required and appropriate.
Each party remains responsible for complying with its respective obligations under applicable data protection laws.
Aquarius Creative Limited’s liability under this Agreement shall be limited to the value of the services supplied unless otherwise required by law.
Aquarius Creative Limited shall not be responsible for errors, omissions, or disclosure decisions arising from incomplete, inaccurate, ambiguous, or changing instructions supplied by the Data Controller.
Aquarius Creative Limited shall not be liable for any disclosure, publication, or release of materials by the Data Controller or any third party following delivery of the completed work.
This Agreement shall be governed by and interpreted in accordance with the laws of England and Wales.
For any questions relating to this Agreement or data protection matters, please contact: Aquarius Creative Limited, Email: pete@aquariuscreative.uk
Unlike AI-based redaction tools that charge more per minute unless you subscribe, we offer a starting rate of just £4.50/min with no contract or subscription required.
Each frame is manually reviewed to ensure nothing is missed. Essential for schools, councils, NHS trusts, and private security firms handling sensitive or legally-requested footage.
We specialise in SAR / DSAR redaction, where accuracy and privacy compliance are non-negotiable.
Our CCTV and bodycam redaction service starts at just £4.50 per minute of footage, with no subscription or monthly fee.
Long clips can be cut down so you only pay for what you need. Perfect for one-off SARs or ad hoc requests.
Automated redaction platforms often charge £6.50 per minute unless you subscribe monthly.
Our £4.50 starting rate includes full manual review and editing. No machine errors, no hidden fees.
Yes. All footage is handled securely and edited by humans, ensuring full compliance with UK GDPR and ICO guidelines for Subject Access Requests.
Blurring - a subtle smooth defocussed patch over sensitive data areas
Pixellating - patches containing small dynamic blocks that suggest movement without revealing details, breaking up the censored part of the image
Blanking - solid black, white or coloured patch completely covering any details underneath
From start to finish you can be assured that we will keep your footage safe, using only vetted personnel and carriers. We do not keep any footage, and when each job is finished, the drives used are electronically ‘shredded’ for your peace of mind.
Protection of Subject Data is a requirement of the data protection legislation in the UK, As a data controller, you have a legal responsibility to ensure you comply with the General Data Protection Regulation (GDPR) when disclosing surveillance footage or still image of individuals.
Compliance is particularly important when responding to subject access requests (SARs), as a minimum requirement you must protect the identity of any other individuals shown in the image, this can be achieved by blurring/pixelation of facial features and locations using video/image redaction.
Further information and how to respond to requests can be found on the ICO website
Protection of Subject Data is a requirement of the data protection legislation in the UK, As a data controller, you have a legal responsibility to ensure you comply with the General Data Protection Regulation (GDPR) when disclosing surveillance footage or still image of individuals.
Compliance is particularly important when responding to subject access requests (SARs), as a minimum requirement you must protect the identity of any other individuals shown in the image, this can be achieved by blurring/pixelation of facial features and locations using video/image redaction.
Further information and how to respond to requests can be found on the ICO website
Yes. The EU – GDPR (European Union – General Data Protection Regulations) were introduced in May 2018 across all countries inside the European Union. Despite our transition outside of the European Economic Area on 31st of December 2020, the GDPR is here to stay and will continue to be in effect for the foreseeable furture.
The GDPR was brought into law in the UK on 31st of December 2020 as the ‘UK GDPR’, however there may be further developments about how we deal with particular issues such as UK-EU data transfers. It was announced that there will be little change to the core data protection principles, rights and obligations found in the GDPR.
To put it quite simply, if you operate inside the UK, you will need to continue to comply with UK data protection laws & regulations.
Use of CCTV security footage is widespread across various sectors, including policing, retail, healthcare, education, and public transport. While these recordings are invaluable for enhancing security and improving operations, they can also pose significant risks regarding personal data protection. To strike a balance between utilising this footage and safeguarding individual privacy, our video redaction and masking services have emerged as essential tools for organisations that must handle sensitive information responsibly.
Video redaction is the process of editing CCTV or BWV footage to obscure or remove identifiable information or personal data before distribution or public sharing. This service is crucial for a variety of reasons. For instance, police often rely on video footage evidence to investigate crimes, but they must ensure that the images shared with the public or in court do not expose sensitive information about innocent bystanders. Similarly, retail businesses may use footage for loss prevention but need to redact images of customers who are not involved in any incident.
Healthcare facilities are mandated to protect patients' privacy under GDPR in Europe (and HIPAA in the U.S). As they capture footage for security or monitoring purposes, redacting the identities of patients and staff helps ensure compliance with these laws. Educational institutions, which also maintain CCTV systems for safety and supervision, must be equally vigilant in protecting the identities of students and staff members. Public transport hubs, monitoring passenger movements, face similar challenges; removing identifiable features is essential to maintaining public trust.
As organisations become increasingly aware of the need to handle personal data with care, understanding the General Data Protection Regulation (GDPR) is crucial. GDPR has established strict guidelines for the processing and safeguarding of personal data throughout Europe, including the necessity to be mindful of how video footage containing identifiable individuals is used.
When an organisation receives a Subject Access Request (SAR) under GDPR, they have a duty to respond in a legally compliant manner. This entails reviewing any CCTV footage for identifiable information and applying appropriate redaction techniques before releasing any material. Failure to do so can lead to significant legal ramifications, including heavy fines. Organisations must educate themselves on these obligations to avoid potential infractions.
Using our comprehensive video redaction and masking services is not just about compliance; it is about instilling confidence among stakeholders. Organisations that prioritise personal data protection demonstrate responsibility and respect for individual privacy, which can enhance public perception and trust.
Furthermore, by using our video redaction and masking service, you can focus on your core activities while maintaining the highest standard of privacy protection.
Surveillance is a common part of daily life, making our video redaction and masking services indispensable. We can empower organisations across various sectors to utilise CCTV footage effectively while adhering to GDPR and protecting individuals' rights. By implementing these services, organisations can foster a more secure environment, paving the way for safer and more accountable practices in managing personal data.
The Benefits of BWV are remarkable:
Captures first accounts on camera including emotions, the scene etc
Captures offences including assaults against officers making it easier to prosecute
Protects the officers against public complaints. Particularly handy with UoF allegations.
Like it or loathe it, the new standard seems to be 'if it wasn't recorded it didn't happen' with tales of magistrates throwing out court cases involving traffic matters because a single crewed officer didn't have their BWV.
Police often complain that they don’t release enough BWV footage to show the excellent arrests and foot-chases. All those times police help vulnerable people in crisis, attending RTC’s - showing the good and the bad. Those times people make malicious complaints? Describe the complaint, then show the bodycam.
BWV and dashcam footage would be easy wins for forces everywhere from a media point of view.
By obscuring identifiable features such as faces, vehicle number plates, or confidential documents, redaction helps comply with data protection laws like the UK GDPR and the Data Protection Act 2018. This ensures that sensitive personal data is not unlawfully disclosed when footage is shared with the public, the media, or used for evidence submission in court proceedings.
For law enforcement, redacted footage can be safely released to support investigations or improve public trust without compromising the privacy of victims, bystanders, or undercover officers.
We can safely deal with footage from Most BWV systems including Axon Body 2, 3 & 4, Motorola VB400 & V700, i-Pro (formerly Panasonic), Reveal Media, and Axis Communications.
Aquarius CCTV and bodycam redaction service provides essential support to private security companies and CCTV surveillance system managers who need to handle video footage responsibly and in full compliance with data protection laws.
With the widespread use of surveillance in commercial, retail, and event environments, security teams regularly capture footage that may be required for investigations, insurance claims, or client reporting. However, sharing unedited footage risks exposing the identities of individuals not directly involved in an incident, creating potential legal liabilities under the UK GDPR and the Data Protection Act 2018.
Redaction offers a practical and legally compliant solution. By carefully obscuring faces, vehicle registration numbers, ID badges, and other identifying details, Aquarius redaction service ensures that video evidence can be securely shared with clients, law enforcement, or legal representatives without breaching the privacy rights of bystanders or staff. This is particularly important for mobile patrol teams using body-worn video cameras (BWV), where footage often includes members of the public in fast-moving or sensitive scenarios.
For CCTV controllers and system managers, our service provides peace of mind. Whether fulfilling a Subject Access Request (SAR), preparing footage for a court case, or conducting an internal review, redacted video allows you to fulfil your operational responsibilities without running afoul of data privacy regulations.
In a sector where trust, professionalism, and compliance are essential, Aquarius redaction expertise helps security providers deliver a transparent, high-quality service while minimising legal risk and protecting individual rights.
We can safely deal with footage from Most BWV systems including Axon Body 2, 3 & 4, Motorola VB400 & V700, i-Pro (formerly Panasonic), Reveal Media, and Axis Communications.
If you're dealing with requests from the public, internal investigations, or police support, our CCTV and bodycam redaction service helps you share footage quickly, securely, and in full compliance with the UK GDPR and Data Protection Act 2018. From just £4.50 per minute of footage, we offer an efficient and affordable solution that protects individual privacy and reduces your team's administrative burden.
Aquarius provides professional CCTV and body-worn video (BWV) redaction services for private security teams, CCTV operators, and system managers. Our specialists carefully obscure faces, vehicle registration numbers, ID badges, and other personal identifiers, allowing you to safely release footage as part of a SAR response or legal disclosure. Whether you operate fixed CCTV across a business estate or handle mobile security bodycam footage, our redaction service ensures compliance with the Surveillance Camera Code of Practice and helps you avoid costly legal risks.
If you're searching for a CCTV redaction service for subject access requests, or need to redact bodycam footage for GDPR compliance, we’re here to support you. You don’t need complex software or in-house training, just send us your video, and we’ll return fully redacted files ready for disclosure. Our transparent pricing and fast turnaround make us a trusted choice for CCTV supervisors managing SARs or regulatory demands.
Let us help you streamline your workload and maintain full legal compliance with our secure, cost-effective redaction service. Perfect for CCTV managers, system operators, and private security firms needing to respond to subject access requests and footage disclosures.
Our redaction process ensures that insurers receive footage that is safe to share, with enough visible detail to show liability, sequence of events, and context, yet compliant with GDPR and data protection rules. We manually mask or blur identities in a way that doesn’t diminish the evidential value of incidents captured on CCTV. This gives insurance adjusters, legal teams, or clients the clarity they need without exposing sensitive personal data.
By handling redaction for insurers, Aquarius Creative helps bridge the gap between visual evidence and privacy compliance. You don’t have to choose between sharing critical footage and protecting individuals’ rights, with professional redaction, you get both.
When local councils capture footage in public spaces, they are responsible for handling that data in line with the UK GDPR and the Surveillance Camera Code of Practice. Redaction enables them to share video evidence with law enforcement, legal teams, subject access requests or other stakeholders without unlawfully exposing the identities of individuals not involved in an incident.
This is particularly important when footage is used for prosecutions, freedom of information requests, or community safety reviews. By blurring faces, number plates, and other identifying details, local authorities can help facilitate effective policing and public reassurance while upholding their legal duty to safeguard personal privacy. Redacted footage ensures transparency and cooperation with the police, without breaching the rights of innocent members of the public captured on camera.
Many subject access requests come from banks due to counting questions like cash bag deposits, counting facilities and cash in transit services. Aquarius can make the masking suitable for each request,
We have always managed to securely mask all identities and security procedures while still disclosing enough of the footage so you can see exactly what you need to.
It's all done manually and we really think about your footage. That’s something an algorithm just can’t do.
Medical emergencies in shops which can mean more careful masking to hide the identities of staff and members of the public who help whilst still leaving the footage clear enough to show healthcare professionals what happened. It can be beneficial to show the moments immediately preceding a fit or blackout to a doctor, as it can help them diagnose the reason.
People use CCTV subject access requests to see how their bag or mobile phone was stolen. We know the unmasked footage goes to the police, but the public want to see it for themselves, and we can help you to comply with data protection law whilst satisfying your customer, as easily as possible.
These environments are typically under constant surveillance to ensure passenger safety, prevent crime, and assist with incident investigations. However, because these systems routinely capture thousands of individuals daily, the organisations operating them must take care to protect personal data when sharing footage externally.
Redaction allows transport operators to provide necessary video evidence to law enforcement, insurers, or regulatory bodies without exposing the identities of uninvolved passengers or staff. Whether responding to a security incident at an airport, investigating anti-social behaviour on public transport, or addressing passenger complaints, redacted footage helps meet legal obligations under the UK GDPR and the Protection of Freedoms Act. It ensures that transparency and accountability do not come at the cost of individual privacy - supporting public confidence in the safety and integrity of the travel network.
Hospitals often use video surveillance to enhance staff safety, monitor high-risk areas, and investigate incidents of violence or theft. However, because this footage frequently captures patients, visitors, and staff in sensitive settings, any disclosure must be handled with extreme care.
Redaction allows healthcare providers to share footage - for example, with police, legal teams, or during internal reviews - while protecting the identities of patients and others not directly involved. This is crucial for compliance with the UK GDPR, the Data Protection Act 2018, and healthcare-specific confidentiality standards. By blurring faces, names, and other identifying features, hospitals can support transparency, resolve incidents effectively, and contribute to a safer environment without breaching patient trust or violating privacy rights.
Educational institutions often use surveillance systems to promote safety, deter bullying, and support safeguarding measures. However, when footage needs to be reviewed or shared—whether in response to incidents, disciplinary processes, or Subject Access Requests (SARs)—redaction ensures that only relevant individuals are identifiable, while others, especially minors, remain protected.
By obscuring faces, name badges, and other identifiable features, schools can comply with the UK GDPR and child safeguarding requirements, while maintaining transparency and fulfilling their legal obligations. To help schools navigate these responsibilities, we've created a dedicated guide for schools on handling CCTV-related Subject Access Requests
With hundreds or even thousands of cameras monitoring gaming floors, cash handling areas, entrances, and back-of-house operations, casinos generate vast volumes of surveillance footage. As privacy expectations and legal obligations increase, CCTV redaction has become an essential practice when this footage needs to be reviewed, shared, or disclosed.
In busy casino environments where crowds, fast movement, reflections, and changing lighting are constant, this process requires careful attention to detail. Manual, frame-by-frame redaction ensures that sensitive information is consistently protected while preserving the clarity and evidentiary value of the footage.
While AI and large language model–based video tools can assist with redaction workflows, they are not infallible. In complex, high-traffic settings like casino floors, automated systems may miss individuals, incorrectly mask the wrong subjects, or fail to account for unusual angles and obstructions. As a result, AI-redacted footage still requires thorough human review, correction, and often resubmission to meet legal and regulatory standards. This means the process is rarely as 'automatic' as it may initially appear.
For this reason, many casinos continue to rely on professional manual redaction services. Human-led review provides greater accuracy, contextual judgment, and accountability, reducing the risk of compliance issues or rejected disclosures. By choosing careful, manually reviewed CCTV redaction, casinos can better protect privacy, maintain regulatory confidence, and ensure that shared footage is fit for purpose in even the most demanding surveillance environments.
Peter works with organisations including local authorities, security providers, IT consultants, CCTV controllers, transport hubs, and insurance professionals who require secure, accurate CCTV redaction for SAR and DSAR requests under UK GDPR. His experience handling evidential and operational footage ensures that identifiable individuals, number plates, and protected information are properly obscured while preserving the integrity of the original recording.
With a strong focus on confidentiality, secure file transfer, and GDPR-compliant workflows, Peter provides reliable redaction services designed to support compliance teams, data protection officers, and operational managers. His approach combines technical precision with a clear understanding of legal responsibilities and sector-specific challenges.
