The Office of the Privacy Commissioner for Bermuda published a guide with best practices for organizations utilizing closed-circuit TV security cameras. The privacy commissioner compared Bermuda's CCTV requirements under the Personal Information Protection Act to similar regulations under the EU General Data Protection Regulation, U.K. General Data Protection Regulation, U.K. Data Protection Act and various U.S. federal laws governing the use of surveillance cameras. To use CCTV cameras under PIPA, entities must analyze privacy risks with a specific privacy program, disclose its specific uses and automatically delete data after a retention period.