I wrote a blog on Linkedin, about the use or re-use of CCTV by employers on my linkedin blog. The need a lawful purpose, and privacy policy and a usage policy, but they may use CCTV in disciplinaries,
if they come across something they cannot reasonably ignore
Big Brother at work