Then you understood wrong. CCTV images are subject to the DPA. The ICO publishes some very clear guidance on use of CCTV. There are several people who are clearly identifiable from the images released, even in the images where there's a (really poor) attempt at pixellation.
Pretty despicable...