Indeed the guidelines have to be met, even for small groups like the Heart of England AS. We have uploaded a privacy policy to our web page, and each member will be required to sign a new form of our own design regarding the data we keep on them, and to say that they have read and agree to the privacy policy.
We use CCTV cameras to cover the car park, and the data is kept on a PC. Therefore we have to register and pay an annual sum to the ICO. If you use CCTV and store the data, their is no escaping it.
Gary