According to the
TARA▸ ,
GWR▸ is data controller for the
CCTV▸ (so that sign is correct) and Agility Trains West Ltd. (i.e. Hitachi) is data processor:
3.2 For the purposes of the Data Protection Act, the Operator shall be the data controller and the TSP▸ shall be the data processor of any personal data contained in the CCTV, FFCCTV and seat reservation data that the TSP may collect, retain and process pursuant to this Agreement. Any such personal data that the TSP may process shall be the Personal Data.
The bits about data protection and data processing by the TSP cover more than just CCTV data, and the main CCTV section starts off about making sure it works and there is a data cartridge in place to record onto:
On-Set CCTV or Forward Facing CCTV Systems
2.4 The Operator shall be entitled to access any of the Sets at any time during the Operational Day and remove any data cartridge from the on-Set CCTV and/or Forward Facing CCTV Systems on such Sets, provided that the Operator notifies the TSP Control Room Contact of such removal before the end of that Operational Day.
2.5 Following any removal of such data cartridge from the on-Set CCTV and/or Forward Facing CCTV Systems on such Sets, the Operator shall return any such data cartridge to the TSP as soon as reasonably practicable.
2.6 If:
(a) the Operator has removed any such data cartridge without providing the notification to the TSP pursuant to Paragraph 2.4; and
(b) such Set is Handed Over by the TSP on the following Operational Day without the necessary data cartridge for the relevant on-Set CCTV and/or Forward Facing CCTV Systems but such Set would otherwise comply with the requirements as set out in Paragraph 1.4 of Part B (Handover) of Schedule 2 (Availability),
such Set that is made available shall not be regarded to have suffered any Category Three Handover Failures or Presentation KPI Standards Failures that are wholly or mainly attributable to an insufficient number of data cartridges for the relevant on-Set CCTV and/or Forward Facing CCTV Systems.
TSP Information
2.7 To the extent the TSP Contract Manager collects any of the following information, the TSP Contract Manager shall retain:
(a) any downloads of on-Set CCTV or FFCCTV footage (which shall include footage from the passenger area, forward and rear facing and external body side cameras) for such period and in such manner as may be required by Applicable Laws and Standards and in accordance with this Agreement;
(b) any 'On Train Monitoring Recorder' downloads for such period of time as may be agreed by the parties;
(c) downloads of each Set's fault-monitoring systems, sufficiently frequently to ensure an accurate and complete history of each Set's fault history is maintained for such period of time as may be agreed by the parties; and
(d) such other information in relation to the management of performance and reliability of the Fleet as may be agreed by the parties.
2.8 The TSP Contract Manager shall, at the reasonable request of the Operator Contract Manager, make records of each of the matters listed in Paragraph 2.7 (whether information retained by the TSP Contract Manager in accordance with Paragraph 2.7 or the corresponding contemporaneous information held on a Set at the time of such request) available to the Operator Contract Manager and any other relevant person or authority that may reasonably require access to such records in such format as the TSP Contract Manager and the Operator Contract Manager may reasonably agree from time to time.
2.9 The TSP Contract Manager shall, at the reasonable request of the Operator Contract Manager, make available any other information reasonably required, and/or reasonably incidental to the services provided to the Operator, by its insurance advisors or insurers that the TSP holds to the insurance advisers or insurers of the Operator (subject, where such information constitutes Commercially Sensitive Information, to the provisions of Schedule 13 (Confidentiality)).
2.10 The TSP Contract Manager shall maintain a server and shall provide the Operator with access to such server to enable the Operator to retrieve the following information:
(a) GPS location data in respect of the train location as described in item 7 of annexe W of the Train Technical Description;
(b) TMS remote data transmission as described in item 20 of annexe W of the Train Technical Description;
(c) On-Train maintenance recorder data as described in item 11 of annexe W of the Train Technical Description;
(d) Passenger count data as described in item 13 of annexe W of the Train Technical Description;
(e) Energy consumption data as described in item 5 of annexe W of the Train Technical Description;
(f) Train maintenance recorder event data in respect of events onboard the train as described in item 18 of annexe W of the Train Technical Description;
(g) Daily timetable data as described in item 2 of annexe W of the Train Technical Description;
(h) Seat reservation data as described in item 8 of annexe W of the Train Technical Description; and
(i) Passenger information system real time messages as described in item 12 of annexe W of the Train Technical Description.
So it appears that Hitachi can't supply data unless the controller - GWR - says so, but in that case must do so (if it still exists). Whether statute law, or any contract directly between Hitachi and HMG, gives
BTP▸ any supervening rights I have no idea.