Institutions may install CCTV systems on their premises for security reasons, and according to Article 5 of Law 8/2005 (Personal Data Protection Act), the purpose of personal data processing may not deviate from that of data collecting. Where staff behavior jeopardizes the security of the institution or other parties, reviews may be made of the CCTV recordings; however, where no such possibility is apparent, the recordings should not be reviewed.