The upcoming expansion of Video Safety and Security Systems at Stanford is the culmination of a comprehensive assessment of risks and privacy concerns, as well as the considerations of community needs in creating and maintaining a safe and secure environment. There are several hundred cameras already installed in locations throughout campus, as well as other Stanford properties, such as the Stanford Redwood City campus, subject to the same standards for use and governance provided in the VSSS Standards.
The questions and responses below provide additional insights into the parameters set out by the Standards and how the systems will operate to uphold Stanford’s commitment to privacy and data minimization.
For inquiries and additional information, contact vsss_inquiry@lists.stanford.edu
The cameras are not routinely used to monitor activity in real-time with the exception of a major event or in an emergency situation. One limited exception is at high-security entry points, such as the SLAC main gate.
This is the culmination of years of discussion and analysis. The university, as an administrative entity, wants to ensure that existing cameras are being used responsibly and that the technology is being applied in a standardized way that reflects the university's commitment to privacy. Stanford also wants to take measures to provide for the personal safety and security of the campus community, particularly students and minors in residence.
A security vulnerability assessment that included the Department of Public Safety (DPS), University IT (UIT), Student Housing, and the Office of General Counsel (OGC) prompted an initial pilot of 7 student housing and dining complexes. In academic and administrative buildings, some cameras were already in place as installed by departments, though cameras added since 2022 have been reviewed by the Infrastructure Safety and Security Committee (ISSC), a body of representatives from a variety of schools and units, and the Executive Steering Committee of the ISSC.
Camera installations at student residences were first proposed in 2018, but there are a number of systems that were pre-existing at other campus facilities. The Infrastructure Safety and Security Committee was already formulating standards that would become the governance of the VSSS program.
The VSSS program was initiated by request of the Provost, due to the growing number of individual departments requesting funds for VSSS installations. Establishing and monitoring the governance of the systems and ensuring that VSSS installations consider the variety of risks on campus has been incorporated into the operations of the Infrastructure Safety and Security Committee.
At the time that the VSSS program was established, approximately 800 cameras were on campus, mostly in the security operations of hospitals and the School of Medicine. Since then, that number has grown to 1,200.
In 2021, when the VSSS program was being established, we contacted five peer institutions, including 2 out of state. All had centralized camera resources and all deployed cameras at residence entrances. The VSSS program brings Stanford into alignment with common practices at other universities.
Cameras will be installed at entrances to buildings and in other areas where a security assessment has identified a risk to safety or property. Conspicuous, standardized signage must be posted where permanent cameras are installed.
Cameras will not be installed in or with views of restrooms and locker rooms, in or with direct views of individual living spaces, in student dining areas, or in interior residential lounges. In addition, the intention is not to capture exterior student gathering areas outside of student residences where possible.
Cameras will be installed to view a specific area of concern or risk, as identified in a security assessment.
The student residences and associated dining halls selected for the first phase of installation completed in the summer of 2023 represented different construction and residence types. There are graduate and undergraduate residences, a variety of residence types (Row house, large complex, small complex, etc.), different types of construction (concrete, wood frame, etc.), and different campus locations (west side, central, Row, east side).
Subsequent phases will cover more residences and dining halls, with a goal of installing cameras at all locations by summer 2025.
The need for covert cameras is a very rare circumstance. All permanently installed cameras will be accompanied by required signage identifying cameras in use in the area. Pursuant to a police investigation, temporary covert cameras may be used to gather specific evidence, as allowable by law.
The assessment is a risk mitigation approach that seeks to understand vulnerabilities in practices and the physical environment. The Department of Public Safety (DPS) uses an analysis tool called Crime Prevention Through Environmental Design (CPTED) as a strategy.
The goal is to complete the installation of cameras at all student residences and dining halls by the end of summer 2025.
Recorded video is a resource owned by the university and managed by University IT. Some departments and vendors have individually managed video, but the goal is to transition all cameras to the central system over time.
Students and other individual community members do not have access to the camera footage. Contact DPS for a criminal investigation or other responsible university offices for administrative investigation.
Access to camera data will be limited to the extent possible. DPS and designated local managers can access the video footage. Any export of footage must be approved by the Office of General Counsel or by DPS directly with a case number.
The footage may only be used pursuant to the investigation of a criminal incident or policy violation complaint.
Recorded video may be used pursuant to a complaint of policy violations in OCS or Title IX investigations, when relevant.
The standard minimum storage time is 32 days. The systems are calibrated to record over footage older than that (no more than 365 days), but the exact overwrite period can be extended by multiple months, depending on recording activity.
Security camera footage has been useful in a variety of cases, including bringing charges against a burglary suspect and a bike theft suspect, in 2024.
Recorded images are stored in a secure location with access by only as few authorized personnel as necessary. A secure location is defined as a room, closet, cabinet, or cage that is controlled by 24/7 card or key access or an approved cloud service.
Recorded images must be stored for 32 days. Recorded images may be retained for up to 90 days by approved request. Recordings retained as part of a criminal investigation or court proceeding, in response to a litigation hold, or for other uses as approved by the Chief of Police, will be retained until a request for deletion is submitted to UIT by the governing entity.
Access privileges to camera views and recorded video will be controlled and limited to as few authorized individuals as necessary (VSSS administrators or managers), and only to those with a legitimate purpose to access video footage; and such individuals will be granted access only to the specific, minimum video footage necessary to achieve such purpose(s). DPS will have access to all VSSS and use that access as appropriate to support investigations and emergencies.
Video monitoring and recording for security purposes will be conducted in a professional, ethical, and legal manner. Violations of the requirements referenced in the VSSS Standards may result in disciplinary action consistent with the rules and regulations governing Stanford community members, as documented in the Stanford Administrative Guide.
On an annual basis, the Infrastructure Safety and Security Committee (ISSC) prepares and presents a report on the use of VSSS to the Faculty Senate’s Committee on Academic Computing and Information Systems (C-ACIS). This committee has faculty, student, and staff representation. The report includes metrics on use of VSSS. The first annual presentation was made to C-ACIS on 5/19/23.
The application and systems that run this service must comply with Stanford’s Minimum Security Standards. The video safety and security systems are actively managed and monitored. In the event of a security incident, a formal incident response plan is documented and regularly tested.
In rare circumstances, with authorization of the Stanford Office of General Counsel, DPS may publicly release footage to ask for the community’s help in obtaining information in an investigation.
University IT (UIT) has responsibility for the oversight of the installation, operations, and maintenance of VSSS. Use of cameras must comply with the VSSS Standards, which is administered by the Infrastructure Safety and Security Committee (ISSC).
Stanford does not use facial recognition or similar technologies on video footage collected under these Standards; and such activities are not permitted under these Standards, except as described below.
From time to time in the context of a government investigation, the University may be required to provide selected video footage collected under these Standards to law enforcement; and law enforcement may subsequently use facial recognition or similar technologies beyond Stanford’s control. In such circumstances, to the extent practicable and allowable (e.g., if not compromising an ongoing investigation), Stanford will (1) collaborate with law enforcement to determine how such facial recognition or similar technologies will be or have been used, and (2) notify affected individuals of such use, when feasible and known to the university.
Only DPS, the Office of General Counsel (OGC), or a designee may release data produced by video security applications (extracted by UIT). The chain of custody concerning the video footage in question will be ensured to prevent tampering or manipulation of any sort.
Any outside agency that requests video to assist with an investigation must serve a subpoena or warrant to the OGC; an exception can be made in an active or in-progress threat situation for which DPS or the OGC can approve an exception.
Refer to the Stanford Administrative Guide 1.8.1 (Protection of Minors) or relevant California and Federal Law on minors.
As with any potential system security incident, breaches should be reported immediately (https://uit.stanford.edu/security/report-incident) and then Stanford’s Information Security Office (ISO) will respond according to their incident response plan.
When you file a police report for your stolen package, the Department of Public Safety will request any pertinent video from the university. The footage will be reviewed to see if information can be developed to pursue prosecution of a suspect. The same process would be followed for any theft investigation. Please note that cameras at residential exterior doors will not capture interior lobbies, only ingress and egress at the door.
For university policy violations for alcohol and drugs, the university refers students to an educational intervention process with the Office of Substance Use Programs Education & Resources (SUPER) in accordance with the Student Alcohol and Other Drugs Policy. Because the cameras are not being used to routinely monitor activity, the video recording of that behavior would only be reviewed if there was a complaint alleging a significant policy violation; in those cases, video footage may be reviewed for incidents that warrant disciplinary review.
Parties involved in a complaint of policy violation will be notified of the complaint and any evidence in support of the complaint.
Video doorbells are only permitted at private residences, and in rental properties (such as Middle Plaza) with the property manager's permission.
Video doorbells are not allowed at student residences or academic/administrative buildings. Non-VSSS and resident-owned systems do not comply with the strict security and privacy measures as required by the VSSS Standards. The data recorded by non-VSSS cameras may not meet the secure storage requirements and the recording of speech or sound is not permitted within the VSSS Standards.