Video Safety and Security Systems (VSSS)

The upcoming expansion of Video Safety and Security Systems at Stanford is the culmination of a comprehensive assessment of risks and privacy concerns, as well as the considerations of community needs in creating and maintaining a safe and secure environment. There are several hundred cameras already installed in locations throughout campus, as well as other Stanford properties, such as the Stanford Redwood City campus, subject to the same standards for use and governance provided in the VSSS Standards.

The questions and responses below provide additional insights into the parameters set out by the Standards and how the systems will operate to uphold Stanford’s commitment to privacy and data minimization.

For inquiries and additional information, contact vsss_inquiry@lists.stanford.edu

Are the cameras being continuously monitored in real-time?

The cameras are not routinely used to monitor activity in real-time with the exception of a major event or in an emergency situation. One limited exception is at high-security entry points, such as the SLAC main gate.

Why are cameras being installed now?

This is the culmination of years of discussion and analysis. The university, as an administrative entity, wants to ensure that existing cameras are being used responsibly and that the technology is being applied in a standardized way that reflects the university's commitment to privacy. Stanford also wants to take measures to provide for the personal safety and security of the campus community, particularly students and minors in residence.

Which parties were consulted in making the decision to install these cameras?

A security vulnerability assessment that included the Department of Public Safety (DPS), University IT (UIT), Student Housing, and the Office of General Counsel (OGC) prompted an initial pilot of 7 student housing and dining complexes. In academic and administrative buildings, some cameras were already in place as installed by departments, though cameras added since 2022 have been reviewed by the Infrastructure Safety and Security Committee (ISSC), a body of representatives from a variety of schools and units, and the Executive Steering Committee of the ISSC.

When did discussions to install cameras start taking place?

Camera installations at student residences were first proposed in 2018, but there are a number of systems that were pre-existing at other campus facilities. The Infrastructure Safety and Security Committee was already formulating standards that would become the governance of the VSSS program.

Was there an event that spurred this decision?

The VSSS program was initiated by request of the Provost, due to the growing number of individual departments requesting funds for VSSS installations. Establishing and monitoring the governance of the systems and ensuring that VSSS installations consider the variety of risks on campus has been incorporated into the operations of the Infrastructure Safety and Security Committee.

How many new security cameras have been installed? How many security cameras are on campus in total?

At the time that the VSSS program was established, approximately 800 cameras were on campus, mostly in the security operations of hospitals and the School of Medicine. Since then, that number has grown to 1,200.

How does the video surveillance plan at Stanford University match up with peer institutions? Is Stanford doing anything similar or wildly different from other Universities?

In 2021, when the VSSS program was being established, we contacted five peer institutions, including 2 out of state. All had centralized camera resources and all deployed cameras at residence entrances. The VSSS program brings Stanford into alignment with common practices at other universities.

Where will cameras be installed?

Cameras will be installed at entrances to buildings and in other areas where a security assessment has identified a risk to safety or property. Conspicuous, standardized signage must be posted where permanent cameras are installed.

Where will they not be utilized?

Cameras will not be installed in or with views of restrooms and locker rooms, in or with direct views of individual living spaces, in student dining areas, or in interior residential lounges. In addition, the intention is not to capture exterior student gathering areas outside of student residences where possible.

How far can the cameras see?

Cameras will be installed to view a specific area of concern or risk, as identified in a security assessment.

Why was my residence selected for cameras?

The student residences and associated dining halls selected for the first phase of installation completed in the summer of 2023 represented different construction and residence types. There are graduate and undergraduate residences, a variety of residence types (Row house, large complex, small complex, etc.), different types of construction (concrete, wood frame, etc.), and different campus locations (west side, central, Row, east side).

Subsequent phases will cover more residences and dining halls, with a goal of installing cameras at all locations by summer 2025.

Will cameras be installed covertly?

The need for covert cameras is a very rare circumstance. All permanently installed cameras will be accompanied by required signage identifying cameras in use in the area. Pursuant to a police investigation, temporary covert cameras may be used to gather specific evidence, as allowable by law.

What was the security assessment that determined whether an area required a camera?

The assessment is a risk mitigation approach that seeks to understand vulnerabilities in practices and the physical environment. The Department of Public Safety (DPS) uses an analysis tool called Crime Prevention Through Environmental Design (CPTED) as a strategy.

By when will cameras be installed at all student residences?

The goal is to complete the installation of cameras at all student residences and dining halls by the end of summer 2025.

Who owns the video footage?

Recorded video is a resource owned by the university and managed by University IT. Some departments and vendors have individually managed video, but the goal is to transition all cameras to the central system over time.

Can I access video footage?

Students and other individual community members do not have access to the camera footage. Contact DPS for a criminal investigation or other responsible university offices for administrative investigation.

Who has access to video footage?

Access to camera data will be limited to the extent possible. DPS and designated local managers can access the video footage. Any export of footage must be approved by the Office of General Counsel or by DPS directly with a case number.

How will the footage be used?

The footage may only be used pursuant to the investigation of a criminal incident or policy violation complaint.

Will the footage be used for an Office of Community Standards or Title IX investigation?

Recorded video may be used pursuant to a complaint of policy violations in OCS or Title IX investigations, when relevant.

How long is the footage saved?

The standard minimum storage time is 32 days. The systems are calibrated to record over footage older than that (no more than 365 days), but the exact overwrite period can be extended by multiple months, depending on recording activity.

Historically speaking, has security footage captured at student residences proven useful? If so, can you share any examples?

Security camera footage has been useful in a variety of cases, including bringing charges against a burglary suspect and a bike theft suspect, in 2024.

Where and for how long the video is stored?

Recorded images are stored in a secure location with access by only as few authorized personnel as necessary. A secure location is defined as a room, closet, cabinet, or cage that is controlled by 24/7 card or key access or an approved cloud service.

Recorded images must be stored for 32 days. Recorded images may be retained for up to 90 days by approved request. Recordings retained as part of a criminal investigation or court proceeding, in response to a litigation hold, or for other uses as approved by the Chief of Police, will be retained until a request for deletion is submitted to UIT by the governing entity.

How and by whom can the video be accessed?

Access privileges to camera views and recorded video will be controlled and limited to as few authorized individuals as necessary (VSSS administrators or managers), and only to those with a legitimate purpose to access video footage; and such individuals will be granted access only to the specific, minimum video footage necessary to achieve such purpose(s). DPS will have access to all VSSS and use that access as appropriate to support investigations and emergencies.

How will misuse of this footage be handled and what consequences can be expected for those who misuse this footage?

Video monitoring and recording for security purposes will be conducted in a professional, ethical, and legal manner. Violations of the requirements referenced in the VSSS Standards may result in disciplinary action consistent with the rules and regulations governing Stanford community members, as documented in the Stanford Administrative Guide.

Will any reporting be done to prove successful uses of this video to mitigate or address community crimes and, if so, whether the cameras will be removed if they are proved unsuccessful in mitigating the types of crime they were initially intended to reduce?

On an annual basis, the Infrastructure Safety and Security Committee (ISSC) prepares and presents a report on the use of VSSS to the Faculty Senate’s Committee on Academic Computing and Information Systems (C-ACIS). This committee has faculty, student, and staff representation. The report includes metrics on use of VSSS. The first annual presentation was made to C-ACIS on 5/19/23.

How do I know the system will not be hacked?

The application and systems that run this service must comply with Stanford’s Minimum Security Standards. The video safety and security systems are actively managed and monitored. In the event of a security incident, a formal incident response plan is documented and regularly tested.

Will this footage be provided to the news media?

In rare circumstances, with authorization of the Stanford Office of General Counsel, DPS may publicly release footage to ask for the community’s help in obtaining information in an investigation.

Who maintains oversight over the system and use of the cameras?

University IT (UIT) has responsibility for the oversight of the installation, operations, and maintenance of VSSS. Use of cameras must comply with the VSSS Standards, which is administered by the Infrastructure Safety and Security Committee (ISSC).

Can facial recognition ever be used on this video footage?

Stanford does not use facial recognition or similar technologies on video footage collected under these Standards; and such activities are not permitted under these Standards, except as described below.

From time to time in the context of a government investigation, the University may be required to provide selected video footage collected under these Standards to law enforcement; and law enforcement may subsequently use facial recognition or similar technologies beyond Stanford’s control. In such circumstances, to the extent practicable and allowable (e.g., if not compromising an ongoing investigation), Stanford will (1) collaborate with law enforcement to determine how such facial recognition or similar technologies will be or have been used, and (2) notify affected individuals of such use, when feasible and known to the university.

Who approves access to the video and who is notified when access is granted?

Only DPS, the Office of General Counsel (OGC), or a designee may release data produced by video security applications (extracted by UIT). The chain of custody concerning the video footage in question will be ensured to prevent tampering or manipulation of any sort.

Any outside agency that requests video to assist with an investigation must serve a subpoena or warrant to the OGC; an exception can be made in an active or in-progress threat situation for which DPS or the OGC can approve an exception.

What are the rights of subjects in the video, with particular clarity around those under 18?

Refer to the Stanford Administrative Guide 1.8.1 (Protection of Minors) or relevant California and Federal Law on minors.

How would data breaches be handled?

As with any potential system security incident, breaches should be reported immediately (https://uit.stanford.edu/security/report-incident) and then Stanford’s Information Security Office (ISO) will respond according to their incident response plan.

My package was stolen from my building lobby. How can cameras help?

When you file a police report for your stolen package, the Department of Public Safety will request any pertinent video from the university. The footage will be reviewed to see if information can be developed to pursue prosecution of a suspect. The same process would be followed for any theft investigation. Please note that cameras at residential exterior doors will not capture interior lobbies, only ingress and egress at the door.

A camera captured me drinking alcohol, and I am underage. What will happen?

For university policy violations for alcohol and drugs, the university refers students to an educational intervention process with the Office of Substance Use Programs Education & Resources (SUPER) in accordance with the Student Alcohol and Other Drugs Policy. Because the cameras are not being used to routinely monitor activity, the video recording of that behavior would only be reviewed if there was a complaint alleging a significant policy violation; in those cases, video footage may be reviewed for incidents that warrant disciplinary review.

Will those impacted by non-law enforcement use of the video be informed and provided access to the video used?

Parties involved in a complaint of policy violation will be notified of the complaint and any evidence in support of the complaint.

Why are Ring cameras, other video doorbells, and other non-VSSS cameras not allowed on university residences?

Video doorbells are only permitted at private residences, and in rental properties (such as Middle Plaza) with the property manager's permission.

Video doorbells are not allowed at student residences or academic/administrative buildings. Non-VSSS and resident-owned systems do not comply with the strict security and privacy measures as required by the VSSS Standards. The data recorded by non-VSSS cameras may not meet the secure storage requirements and the recording of speech or sound is not permitted within the VSSS Standards.