The licence holder must have a data protection policy which explains why CCTV or a Dashcam is necessary and what controls will be used to ensure the secure storage and processing of data recordings.