CASES, SANCTIONS AND CLAIMS
- (2019, Apr) ICO fines a TV production company for unlawfully filming patients in a maternity clinic.
- (2019, Dec) The CJEU rules on a case originating from Romania, on the topic of video surveillance systems installed by landlords’ associations (Case C‑708/18). Issues concerning the collection and use of footage from such CCTV systems has also been scrutinized in the recent Romanian DPA fine imposed on a landlord association for improper disclosure of images to unauthorised third parties.
- (2020, Feb) Man allowed appeal at Irish High Court over the use of CCTV cameras in a disciplinary action against him “taking unauthorized breaks and controversial graffiti drawing”.
- (2020, Mar) The Spanish DPA has imposed a fine of EUR 4,000 on an individual for violation of Art. 5.1 c (data minimization principle) by installing a surveillance camera that could also monitor a public space near their home property.
- (2020, Aug) The Norwegian DPA announced it imposed a fine of NOK 400,000 (aprox. €38.000) on a municipality for processing personal data for purposes that are incompatible with the original purpose and not deleting camera recordings after seven days (the press release in Norwegian is available here).
- (2020, Sep) Norwegian DPA: Decision to fine The Norwegian Public Roads Administration, for extensive processing of personal data by using fixed road cameras to monitor contract parties, employees, subvendors and the subvendors’ employees.
(2020, Oct) The Hamburg Commissioner for Data Protection and Freedom of Information has issued a fine of 35.3 Million Euro against H&M Hennes & Mauritz Online Shop A.B. & Co KG for illegal surveillance of its employees (the press release is available here).
(2020, Oct) The Data Protection Commission has ruled that Wexford County Council failed to adhere to the law by using drones to monitor public movement during the Covid-19 lockdown.
REPORTS AND ARTICLES FROM OTHER ORGANISATIONS
OFFICIAL GUIDELINES, REPORTS AND STATEMENTS
- (2018, Oct) Surveillance Camera Commissioner (UK): data protection impact assessment template and a guidance in this regard.
- (2019, May) Irish DPC: Guidance on the Use of CCTV – For Data Controllers.
- (2019, May) Spanish DPA: guide which makes an analysis on the data processing operations conducted via drone.
- (2020, Jun) Irish DPC: Guidance for Drivers on use of “Dash Cams” – recording with the use of a Dash Cam makes you likely to be a data controller.
- (2019, Jul) Irish DPC: Guidance on CCTV in the home.
- (2019, Jul) EDPB : video surveillance guide.
- (2019, Dec) French CNIL: finds it excessive to use CCTV in schools for systematic and continuous surveillance.
- (2020, Feb) Isle of Man Information Commissioner: guiding points on CCTV in various scenarios.
- 2020, Jul) Romanian DPA (interview in RO): Using dash cams is not subject to the GDPR.
- (2020, Jul) Romanian DPA (interview in RO): Installing a door intercom video system does is not subject to the GDPR.
- (2020, Jul) German DPAs (DSK): new guidelines on video surveillance (available only in German).
- (2020, Sep) U.S. Department of State released Guidance on Implementing the UN Guiding Principles for Transactions Linked to Foreign Government End-Users for Products or Services with Surveillance Capabilities (the press release is available in English here).
