Subscriber Discussion

GDPR Issues I Should Be Aware Of?

UE
Undisclosed End User #1
•Mar 01, 2018

Our corporation is based in the US, but we have sites in the EU. We manage the CCTV systems in the EU from our corporate headquarters. Storage of video is maintained at the EU site, but we review and retain as needed. Discrimination of findings usually takes place via a written account of what was found, with actual video rarely provided.   

Next week I have a meeting with our IT Security Department to discuss GDPR. Surprisingly, there doesn't seem to be much chatter on IPVM about it. The GDPR site wasn't exactly a page turner.

Can anyone help with some bullet points to help direct the conversation from my perspective? I know that's vague, but any assistance would be helpful.  

Avatar
Brian Rhodes
•Mar 05, 2018
IPVMU Certified

I was not familiar with 'GDPR', but it stands for 'General Data Protection Regulation'.  Here is the EU's GDPR source page.

Googling around returns several pages on how video surveillance and GDPR impact each other, including this guide and these general guidelines:

  • Data must be used and kept only to fulfil its original purpose. For instance, if the purpose of holding data is to identify individuals engaged in criminal activity, the footage should be of sufficient quality to do so and be available to the police should they request to view it.
  • CCTV recordings and other logs must be stored securely and encrypted wherever possible.
  • Individuals have the right to request a copy of any CCTV footage in which they are in focus and/or clearly identifiable. If the request is valid and permissible, the organisation must supply the individual with that footage within 30 days of the validation. The same is true of other kinds of data relating to employee monitoring.
(1)
JH
John Honovich
•Mar 10, 2018
IPVM

We are doing research into this for an upcoming guide. I don't have anything else to add right now but I did want to respond to let you know that IPVM recognizes the importance of GDPR and will be covering it formally and in-depth.

(1)
UE
Undisclosed End User #1
•Mar 10, 2018

Great. Thanks.

New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions