But she said, in general terms before installing CCTV: "Organisations must first establish whether there is a lawful reason for processing those images and, secondly, determine whether the activity is fair and proportionate when balanced with the problem at hand, such as preventing vandalism or other crimes."