Scotland already operates searchable CCTV, national vehicle-tracking records, identity-matching systems and environmental sensors inside council homes. Private technology companies provide much of the infrastructure, while a new government strategy calls for greater integration of public information. The question is how far these systems can be connected, who controls the information and what citizens can refuse.
Across Scotland, public authorities are acquiring increasingly sophisticated capabilities to observe, identify and collect information about people. In Aberdeen, police can search CCTV recordings from approximately 100 cameras for individuals matching particular descriptions. On Scotland’s roads, number-plate recognition systems retain records of vehicle movements for up to a year. In Edinburgh, sensors transmit environmental readings from occupied council homes every 15 minutes. Elsewhere in local government, software matches individuals’ records across public services using unique identifiers.
These technologies are operating now, although they belong to different organisations and were developed for different purposes. They do not constitute a single surveillance network capable of identifying every resident, following their movements and recording their personal relationships.
What makes their development significant is the Scottish Government’s intention to connect more public-sector information. Its November 2025 digital delivery plan proposes greater interoperability between government systems, shared identity services, secure data exchange and more personalised public services.
Some of these developments may substantially improve administration. They could reduce duplicated records, identify people entitled to assistance and allow public bodies to coordinate services more effectively. But the closer information systems become, the more important it is to establish what prevents data collected for one purpose from being used for another.
Aberdeen: Searching People Across a Network of Cameras
On 29 September 2026, Police Scotland confirmed that a three-month pilot of BriefCam video-analysis software was underway in Aberdeen.
The pilot began on 14 September and is scheduled to finish on 14 December. It draws on approximately 100 public CCTV cameras across Aberdeen city centre, Torry, Mastrick and Rosemount.
BriefCam enables officers to search recorded footage for people and objects matching visual descriptions. Rather than manually reviewing hours of recordings, an officer can search for a person wearing particular clothing or a vehicle with specified characteristics.
The software does not need to know someone’s identity to locate images potentially showing that person. It can classify appearances and reduce the amount of footage officers must examine.
Police Scotland says the facial recognition capability is disabled for the trial. The system is therefore not authorised to identify people through biometric comparison with a database of known faces.
Nevertheless, searchable video changes the practical capabilities of public CCTV. Recordings gathered at different times and locations become easier to examine for particular individuals, even where their names are unknown.
Police Scotland consulted on the proposal between March and May 2024, receiving 1,369 responses. Fifty-two per cent of respondents said the technology would make them feel safer, while 23% said it would never make them feel safer. Eighty-four per cent supported clear rules governing its use.
Those figures describe consultation participants, not a representative vote by Aberdeen residents.
The pilot will be evaluated before any decision on wider deployment. Its results should establish operational performance, including accuracy, investigative benefits and how the software is used under police procedures.
The public-interest questions are whether searches are independently audited, what justification officers must record, how long the recordings remain available and what further capabilities could be authorised in future.
Edinburgh: Different Monitoring Systems Brought Together
Edinburgh provides the clearest documented example of an integrated smart-city operations platform.
In January 2025, technology company Genetec confirmed that its Security Center software was being used as the foundation of Edinburgh’s smart-city operations centre.
The platform brings together public-space CCTV, video analytics and information from connected devices. Working with infrastructure supplier North, the council developed facilities allowing operators to coordinate information used for public safety, transport and other city services.
Genetec reports that the arrangements have more than doubled the number of Police Scotland video requests the council can fulfil. That is a supplier-reported performance claim, not an independently established measure of crime reduction.
Other connected systems include approximately 11,000 sensors in street and communal waste bins, traffic-monitoring equipment and environmental sensors inside council housing.
The city’s traffic-management system can use information about congestion and journey times to adjust traffic signals. Waste sensors can indicate when bins require collection, allowing routes to be planned according to demand.
These installations demonstrate how information can be collected and acted upon without necessarily identifying individuals.
CCTV presents a different question because recorded footage may contain recognisable people.
Edinburgh Council states that facial recognition is not used on its upgraded public-realm cameras. It also says that ordinary footage not retained for evidential purposes is automatically deleted after 14 days, with access restricted to authorised personnel.
The integration of operational information does not establish that Edinburgh has connected CCTV footage with council-tax records, digital identities or private shopping transactions. No such comprehensive connection has been verified in the documents examined.
What Is Being Monitored Inside Council Homes?
Edinburgh’s housing-sensor programme raises a different set of questions because the equipment operates inside occupied properties.
The council has documented the installation of environmental sensors in 500 council homes to identify conditions associated with damp and mould.
In evidence to the Scottish Parliament on 25 March 2025, council surveying manager Craig Dugdale explained that sensors transmitted readings every 15 minutes, including temperature and relative humidity, from which dew point could be calculated. The wider programme also identifies carbon-dioxide monitoring.
When the system identified existing or predicted dampness, housing staff could be alerted. Officers might arrange an inspection or telephone the tenant to investigate changes in household conditions.
Dugdale gave the example of an additional family member staying over Christmas, potentially increasing humidity inside the property.
This illustrates how information collected to assess a building can also suggest something about its occupants.
Temperature, humidity and carbon-dioxide levels are influenced by ventilation, heating, cooking and the number of people present. They cannot reliably identify particular individuals or establish precise behaviour on their own, but changes over time may indicate patterns of occupancy.
The council has a legitimate responsibility to address dangerous damp and mould. Early detection may improve living conditions and prevent more expensive repairs.
The unresolved questions concern the boundaries of that monitoring. The published records examined do not establish whether participating tenants can refuse the sensors, who supplies and hosts the monitoring system, how long individual readings are retained or whether the information may be used for purposes unrelated to property maintenance.
Nor is there evidence in those records that the council uses the technology to punish tenants, identify visitors or make adverse tenancy decisions.
The Scottish Cities Alliance has reported Edinburgh Council’s ambition to extend environmental monitoring across approximately 20,000 council homes. That is an expansion ambition, not evidence that every property has already been fitted with sensors.
Before any wider rollout, tenants should be able to establish precisely what the equipment records, who can access their household’s information and what options are available if they object.
Police Scotland Already Retains Vehicle Movements
Automatic number-plate recognition, or ANPR, provides a confirmed example of location-based information being collected across Scotland and the wider United Kingdom.
Police cameras read vehicle registration numbers and check them against records of vehicles of interest.
Police Scotland confirms that the system retains records of vehicles passing cameras even when those vehicles are not suspected of involvement in crime.
The information records the vehicle registration together with the time and location of detection. Scottish records form part of a national system shared with other UK police forces.
The ordinary retention period is one year. Most authorised users may access the preceding 90 days, with longer access available for specified serious investigations under additional authorisation.
Police Scotland’s published information estimates that approximately 60 million ANPR records are submitted nationally every day across the UK. That figure does not represent Scotland’s daily total.
ANPR identifies a vehicle registration, not conclusively the person driving. Nevertheless, records can be used alongside other information to reconstruct a vehicle’s journeys.
The system is separate from Scotland’s original smart-cities programme. Its significance is that searchable, location-linked information about vehicles is already retained across policing jurisdictions, including records generated when no offence is suspected.
There is no general individual opt-out for motorists passing an operational ANPR camera.
Council Systems Can Already Match Individual Records
Not all information linking concerns physical surveillance.
Scotland’s Improvement Service operates a Data Hub supporting the matching and improvement of records held by participating public authorities.
Its documentation describes the use of Unique Citizen Reference Numbers, known as UCRNs, and Unique Property Reference Numbers, or UPRNs.
These identifiers allow organisations to establish more reliably whether separate records concern the same person or property.
An Improvement Service case study describes how Moray Council began using the Data Hub in 2018 to match customer-management records with myaccount information. The work subsequently extended to housing and adult social care records.
The council used the resulting matches to improve customer information, remove duplication and avoid errors in communications and service delivery.
This is documented cross-database linking, rather than a hypothetical future capability.
The same technical principle also creates a need for clear limits. Once records can be reliably associated with the same person, decisions about which information may be combined become increasingly important.
The Improvement Service’s myaccount identity platform also includes arrangements for specified identity checks involving the NHS Central Register. Its published 2020 Data Privacy Impact Assessment describes explicit user consent for those checks and restrictions on which organisations may receive particular identifiers.
These systems are not documented as being connected to Aberdeen’s BriefCam footage or Edinburgh’s public CCTV.
ScotAccount Adds Another Identity Service
ScotAccount, operated separately by the Scottish Government, allows people to sign in and verify their identity for participating online public services.
Its identity-verification arrangements name commercial providers including Experian and Mitek. The Scottish Government also identifies Amazon Web Services as a hosting provider and Cifas in fraud-prevention arrangements.
The service can allow verified identity information to be reused in participating services under applicable permission and data-sharing arrangements.
This is not evidence that ScotAccount is tracking people through smart-city cameras.
It does, however, demonstrate that government services increasingly possess shared mechanisms for establishing identity without each organisation independently repeating the complete verification process.
ScotAccount’s terms acknowledge that some online services may require the account for access. A person declining the required verification may therefore be unable to use that particular online route, although alternative arrangements depend on the service.
The public-interest issue is whether reusable identity remains confined to clearly authorised transactions or becomes a requirement across a growing range of essential services without adequate alternatives.
The Companies Behind the Technology
Scotland’s surveillance, sensor and identity systems involve different commercial suppliers. Some provide cameras and communications infrastructure, while others supply software through which public authorities collect, organise or search information.
| Company or organisation | Documented Scottish role | Information or technology involved |
|---|---|---|
| BriefCam | Aberdeen police pilot; Dundee CCTV analytics | Recorded images, visual classification and searchable footage |
| Genetec | Edinburgh smart-city operations centre | Integrated CCTV, video analytics and operational information |
| North | Edinburgh technology infrastructure; Tayside CCTV maintenance | Camera networks, control-room infrastructure and connected equipment |
| CGI | Edinburgh smart-city technology partnership | SensorInsights360 and connected-device information |
| Improvement Service | Data Hub and myaccount | Council records, identity attributes and reference identifiers |
| Experian and Mitek | ScotAccount identity-verification services | Information used in specified identity checks |
| Amazon Web Services | ScotAccount hosting | Cloud infrastructure supporting government identity services |
These organisations do not have identical responsibilities.
A company supplying a monitoring platform does not automatically own the information processed through it. Public authorities can remain legally responsible for determining the purposes of processing while commercial contractors maintain equipment, operate software or provide technical support.
But legal responsibility and practical access are different questions.
A complete assessment requires the contracts specifying what suppliers and subcontractors may access, whether they can provide remote support, where information is stored and what happens to records when agreements end.
Those arrangements cannot be established for every Scottish smart-city system from the publicly available supplier announcements alone.
Scotland’s Government Wants More Connected Public Data
On 18 November 2025, the Scottish Government published its Sustainable Digital Public Services Delivery Plan 2025–2028, developed with local government.
The plan commits to stronger data exchange, common technical systems, reusable digital identity and more personalised public services.
It envisages a public-services application allowing residents to access participating government services through a common digital channel. It also proposes better ways of understanding people’s journeys through online public services.
That means interactions with government websites and applications, not a programme to record physical journeys through streets.
Nevertheless, the policy explicitly supports greater interoperability between public-sector databases.
| Government development | Intended function | Evidential position |
|---|---|---|
| Secure public-sector data exchange | Permit authorised discovery and sharing of information | Further development planned |
| Common technical architecture | Improve interoperability between public bodies | Policy commitment |
| Reusable identity services | Verify people across participating services | Existing services, with expansion planned |
| Public Services app | Provide a shared channel for accessing government services | Development and pilot plans |
| Shared council systems | Explore common housing, social-work, licensing and other platforms | Feasibility and development work |
| Cross-service digital analytics | Understand interactions with public services | Policy direction, not proof of physical surveillance |
Better information exchange may reduce duplicated forms, improve the accuracy of records and make services easier to access.
It could also increase the consequences of incorrect information, excessive access permissions or the reuse of personal data beyond its original purpose.
The essential distinction is between connecting systems to deliver an authorised service and combining information to build an increasingly detailed account of an individual’s activities.
The government’s plan establishes the intention to expand interoperability. It does not establish a present system combining CCTV, digital identity, retail purchases and personal associations.
Can Citizens Refuse Monitoring?
The legal position varies according to the technology and the purpose for which information is processed.
| System | Position on opting out |
|---|---|
| Public-space CCTV | No general right to require lawful cameras to stop recording an individual |
| Police ANPR | No general opt-out when a vehicle passes an operating camera |
| Aberdeen BriefCam pilot | No separate individual opt-out established for people appearing in public CCTV |
| Edinburgh council-home sensors | Tenant refusal arrangements remain unverified in the published records examined |
| myaccount attribute checks | Published assessment describes explicit consent for specified identity checks |
| ScotAccount | Participation and verification requirements depend on the particular online service |
| Wider government data sharing | Rights depend on the legal basis, purpose and applicable exemptions |
Under UK data-protection law, public authorities do not always require individual consent to collect personal information.
Processing may be authorised for a lawful public task or law-enforcement purpose. In those circumstances, an individual’s refusal does not necessarily prevent the information being collected.
Public bodies remain subject to applicable obligations concerning necessity, proportionality, fairness, security, transparency and retention.
Individuals may also have rights to request access to information, correct inaccuracies, object to certain processing and complain to the Information Commissioner’s Office. These rights are not absolute, particularly where specific legal exemptions apply.
The practical distinction matters. Someone may choose not to use an optional digital service but cannot ordinarily avoid every public CCTV camera or ANPR installation while travelling through Scotland.
A council tenant may face a different problem if environmental monitoring equipment is installed within their home and their ability to refuse it is unclear.
The existence of a lawful basis for data collection does not remove the need to explain why the collection is necessary, whether less intrusive alternatives exist and how misuse can be challenged.
What Is Operating and What Remains Unproven?
| Capability | Status in October 2026 |
|---|---|
| Search CCTV for people matching visual descriptions | Operating: Aberdeen pilot; Dundee analytics |
| Integrate CCTV and connected-sensor information | Operating: Edinburgh |
| Retain vehicle-location records nationally | Operating: Police ANPR |
| Match selected council records using personal identifiers | Documented: Improvement Service Data Hub |
| Verify identity across participating public services | Operating: myaccount and ScotAccount |
| Collect environmental information inside council homes | Documented: Edinburgh |
| Expand public-sector data exchange | Planned: Government 2025–28 delivery programme |
| Deploy police live facial recognition in Scottish streets | Under consideration: No authorised deployment established |
| Link CCTV subjects to ScotAccount identities | Not verified |
| Combine personal shopping, movement and association histories | Not verified |
| Operate a single database tracking all Scottish residents | Not verified |
The gaps in this table are important. A system may possess technical capabilities that are not enabled, authorised or connected to other systems.
Neither the existence of advanced software nor a government’s plans for better data sharing establishes that comprehensive personal tracking is taking place.
The Question for Scotland
Scotland’s connected infrastructure is no longer confined to experimental projects. Searchable video analytics, vehicle-location records, identity matching and environmental monitoring have established operational uses.
At the same time, government policy is moving towards more shared digital services and greater exchange of information between public bodies.
The distinction between monitoring infrastructure and monitoring people must therefore remain explicit in the rules governing each system. A technology installed to manage traffic or maintain housing should not automatically acquire broader uses simply because its data can be combined with other records.
The central question is whether public authorities can demonstrate that those boundaries are enforceable and that individuals retain effective means of understanding and challenging information collected about them.
Scotland has not been shown to operate a single system recording everyone’s movements, purchases and associations. But it already has several technologies that could contribute different kinds of information to a much more detailed personal record if new connections were authorised.
Whether that happens will depend on future political decisions, procurement arrangements, technical design and the application of existing law.
The responsibility of government is to establish those limits openly before expanding the connections, rather than expecting citizens to discover afterwards how much information about their lives has become available.
Sources
Police Scotland — Police Scotland’s Use of Enhanced CCTV Technology: Public Consultation and Pilot Update, 29 September 2026. https://consult.scotland.police.uk/strategy-insight-and-innovation/briefcam-public-consultation/
Police Scotland — Automatic Number Plate Recognition (ANPR), accessed 13 October 2026. https://www.scotland.police.uk/about-us/how-we-do-it/automatic-number-plate-recognition-anpr/
City of Edinburgh Council — Our Smart City Programme, accessed 13 October 2026. https://www.edinburgh.gov.uk/council-planning-framework/smart-city-programme
City of Edinburgh Council — Public Realm CCTV Upgrade: Privacy and Data Protection, accessed 13 October 2026. https://www.edinburgh.gov.uk/community-safety-antisocial-behaviour/public-realm-cctv-upgrade/1
Scottish Parliament — Local Government, Housing and Planning Committee: Official Report, 25 March 2025. https://www.parliament.scot/chamber-and-committees/official-report/search-what-was-said-in-parliament/LGHP-25-03-2025?iob=139662&meeting=16348
Genetec — Edinburgh Accelerates Smart City Transformation with Genetec, 28 January 2025. https://www.genetec.com/press-center/press-releases/2025/edinburgh-accelerates-smart-city-transformation-with-genetec
Genetec — The City of Edinburgh Council: Unified Smart City Strategy, supplier case study, 2025. https://www.genetec.com/customer-stories/the-city-of-edinburgh-council
Scottish Cities Alliance — Scotland’s 8th City – the Smart City Programme, 2015–2023. https://scottishcities.org.uk/smart-cities/
Scottish Cities Alliance — Dundee and the 8th City Programme. https://scottishcities.org.uk/smart-cities/dundee-and-the-8th-city-programme/
Improvement Service — Data Hub: The Secure Way to Match and Cleanse Data in the Scottish Public Sector. https://www.improvementservice.org.uk/products-and-services/digital-public-services/data-hub
Improvement Service — Improving Internal Data and Customer Service at Moray Council. https://www.improvementservice.org.uk/case-studies/improvement-service/improving-internal-data-and-customer-service-at-moray-council
Improvement Service — mygovscot myaccount Data Privacy Impact Assessment, version 3.4, 1 June 2020. https://www.improvementservice.org.uk/__data/assets/pdf_file/0018/8901/IS-DPS-myaccount-DPIA-v3.4-FINAL-Public.pdf
Scottish Government — ScotAccount Terms of Use. https://authn.scotaccount.service.gov.scot/sign-up/terms-and-conditions
Scottish Government — ScotAccount, mygov.scot. https://www.mygov.scot/scotaccount
Scottish Government — Digital Strategy for Scotland: Sustainable Digital Public Services Delivery Plan 2025–2028, 18 November 2025. https://www.gov.scot/publications/digital-strategy-scotland-sustainable-digital-public-services-delivery-plan-2025-2028/
Scottish Government — Local Authority Digital Systems and Use of Artificial Intelligence Queries: FOI Release, 13 August 2025. https://www.gov.scot/publications/foi-202500473823/
Information Commissioner’s Office — The Right to Object to the Use of Your Information, updated 23 July 2026. https://ico.org.uk/for-the-public/the-right-to-object-to-the-use-of-your-information/
Information Commissioner’s Office — How Can We Comply with the Data Protection Principles When Using Surveillance Systems? https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/cctv-and-video-surveillance/guidance-on-video-surveillance-including-cctv/how-can-we-comply-with-the-data-protection-principles-when-using-surveillance-systems/
