Implementing "privacy-by-design" can significantly mitigate risks:
: In India, the Supreme Court has established the Right to Privacy as a fundamental right under Article 21.
: Some systems may retain data in "deep storage" even when they are not actively recording or if a subscription has lapsed.
: Starting April 1, 2026, the Indian government has made STQC certification mandatory for all CCTV systems sold in the country to ensure better data security.