Irish City Fined $120,000+ for 400+ Camera System Violating GDPR

Executive *******

*******'***** ********** **********(***) *** ***** *** ********** ** the *******'* *****-******* ****,********, €***,*** (**$***,***)* *** ******** ********* of **** *** ***** **** ********** legislation ***-**********. * ****–**** *** ******* found **** ******** *** "** ****** basis *** *** ********** ** ******** data" *** *********** ****** *** ***** government **** ********** ******** **** ***** it ***** *********** * ***** ***** for ***** **.

** *** ****** ******, **** *********** would *** ****** ***** *** ** has ** ********** ********** ** *** EU's ****.

*** ******** ******* *** *** ***'* decision ********** *** ***** ** ********* the **** ***** *********' ********* **** ******* **** collection ** ****** ******.

******** ************* **** **** ** * ************* *** ******* **** *** **** uninstalled, *** *** *************** **** ******* the **** **** **** ********. ** is ******* ***** ******* **** ********** be *******, ** **** ******** ******* on ************ **** ****** *** ***** take ** ** *** ******.

**********

********** *** ******** ** *******'******-******* ********* ****** *** ****, ************. *** city, ************ ** *********** **** & ****** *******, ********* *** * ***-****** **** deployment, ***** ******* ** *** "***** CCTV *******/******," ***** ** ***** **** to ****** ****. ***** *** ******* are *** (***** ** ******* ** ANPR) *******, ** ******** ** ******.

**** *** ****** ** ****** ***** manufacturers *** ******* ** *** ******** implementation.

DPC *******

*******'***** ********** **********(***),*********** ** **** ** *** ****** of *** **** ********** ************, ******* ****** ** *******'* **** supervisory *********:

The *** ** *** ***** *********** ********* *** *** ******* **** ********** ********** (****), and also has functions and powers related to other important regulatory frameworks including the Irish ePrivacy Regulations (2011) and the EU Directive known as the Law Enforcement Directive.

*** *** ********* ** '***-******** *******' into ********'* **** ********** ** **** 2018. (** *** ******* ** *** DPC, ****** ******* ** *********** **** ** '***-******** *******' "***** **** *** *** ** ****** on *** ************* ** *** *** initiative ******* * ********* **** * third *****.")

** ********* *** ******** *******, *** DPC, ***** ****** *** ******** **** modified ** *******'***** ********** *** ****, ***** **** **** ***** ** May ** **** ****, **** **** that ** ****** ** ***** ********** and ************** ******** *********** *** **** deployment ** *** ******** ** *******'* third-largest ****:

*** ******* ****** ** ****** ******* Limerick **** *** ****** ******* *** processing ******** **** ** ********** **** the **** *** *** **** ********** Act ****. *** ******* ******** * number ** *** *******’* ********** ********** including *** *** ** **** *******, Automatic ****** ***** *********** ********** *** drones ** ****** ****** ***** **** used *** *** ******** ** *********** crime ** ***** ********.

DPC ********

*** *** ********* *** **** ********(********) ** *** ******** ************** ** December **** ********* * *****-***-*-****-**** *************.

** * ******* ** *** ********, *** *** ******** **** *** Limerick **** & ****** ******* **** had * ***** ***** *** ** of *** *** **** ******* *** that ** *** ** ***** ***** for *** *** ** *** *******:

• *** ******* *** ** ****** ***** for *** ********** ** ******** **** by **** ******* *** ******* ********** purposes.
• *** ******* ****** * ****** ***** for * ****** ** **** ******* used *** *** ******** ** ********** crime ** ******* ** ******* ** demonstrate ** *** ******** * ***** Commissioner ************* ******** ** ******* **(*) of *** ***** *í***á** *** **** which *** ************ *****, ******* *** foreseeable ** ********* ** *** ****.
• *** ******* ****** * ****** ***** to ***** *** ************ **** **** cameras ***** ******** ********* ****** ***** Recognition **********.
• *** ******* ********* ******* ** ** the **** ** ********* ******* ****** requests ** ******* ** **** ******* used *** ******* ********** ********.
• *** ******* *** *** ****** *** transparency *********** ***** ******* ** ** failing ** ***** ******* ** ******* of *** **** ********** **********.
• *** ******* ********* ******* ** ** the **** ** ******* ** **** its **** ****** **** ****** ********** and ***********.

GDPR *************

** ******** ** ******* * ***** basis *** ~**% ** *** **********, which *** *** ***** ** ** an ************ ** ******* * ** the ****, *** *** **** ***** Limerick ** **** ********* ** ** least **** ***** ******** ** *** GDPR *** ** *** ******* ** erect ****** ******* (**** ******* **), failure ** ****** ************ *** ************* (GDPR ******* **), ******* ** ******** proper ****** **** (**** ******* **), and *** ********* ****** ******** (**** Article **).

DPC ***** ********, ****** ********* ****

*** *** ****** ******** ********* **** on ********, ********* * ********* *** on ***, ** **** ** * €110,000 (**$***,***) **** *** **** **********:

• * ********* *** ** *** ********** of ******** **** **** **** ******* at * ****** ** ********* **** for *** ******** ** ******** *** enforcement ***** * ***** ***** *** be **********.
• * ********* *** ** *** ********** of ******** **** **** **** ******* used *** ******* ********** ******** ***** a ***** ***** *** ** **********.
• ** ***** ** ******** **** *** County ******* ** ***** *** ********** of ******** **** **** ********** ****** certain ******* ********* ** *** ********.
• * ********* ** ******* ** * number ** ******** **** *** ****** Council’s *************.
• ** ************** **** ** €***,***.

*** *** ***** **** *** ******** components ** *** ******** **** **** in ** ***** ** ****:

The *** ***** *** ******* €**,*** *** ********** ******* ** ** *** ****. Article 15 of the GDPR entitles the data subject to access personal data from a controller. The Council infringed Article 15 by refusing access requests from data subjects in respect of the CCTV cameras it operated in the city centre for monitoring traffic.

The *** ***** *** ******* €**,*** *** ********** ******* ** ** *** ****. Article 13 requires controllers who collect personal data from data subjects to provide details such as the identity of the controller who is collecting the data, the contact details of the data protection officer, the purposes for which the personal data is being processed etc. The Council infringed this provision by failing to install signage which would have given notice to the public that their personal data was being processed by the Council. Without this signage members of the public would have been unaware who was the controller of the cameras which would have impeded their exercise of their rights under the GDPR. The Council also infringed Article 13 for failing to provide the required information on the traffic management cameras on their website.

The *** ***** *** ******* €**,*** ** ***** **** ****** *** *** ****** ********** *** ***********. It was not readily visible on the Council’s website and it also did not state the Council was the controller of the traffic management CCTV cameras. [emphasis added]

DPC: **** "*************, **********"

**** ****,**** ************ *** ****** **** **** ****** 30 ********* *** **** ~$*,*** *** that ******* *** *** ** ***** any ****-******* *****. **** *** ******** decision, *******'* *** *** *** ****** one ** *** *********'* ******* ****-******* fines ** €***,*** (**$***,***).

*** *** **** **** **** *** blockbuster **** ** "*************" *** ***** the "******* ******" ** ********'* **** infringements:

*** *** ***** *** ******* ** it *** ********** * *************, ********** and ********* ******* ** ***** ** the ************* *********** *** *******’* ************* of *** **** *** *** ******* nature ** *** *************. ** ***** the **** ******** ** €***,***.

DPC ****** ************: ******** **** "********* *****"

**** *******, *** ***'* ****** ************, **** of ********** ********, ******** *** ********* upon *** ******'* ******** ** *** January **** ******** ********* ** *** Irish ******** ********* (*,*).

**. ******* **** *** ***** ******** that ******** "***** *** ** ** outlier" ***** ***** ****** ** ***** for *** ********* *** ** ****, a **** **** ** ****** ** well-known ** ***** *********:

*** ****'** **** **** ***** ***** we ***** ************* ** ********* ****. I ***** **** **** **** ***** —something ** ********* ***** ****. [emphasis added]

*** ******** **** & ****** *******, which *********** ***-***** ***** ******* ******** city ****** ** ******** ** *** City ** ******** ******, ******** ** its **** ********** ******* ** ******** with *** ***** *****, ********* ** Mr. *******:

* ****** ** *** *******, * looked ** *** ******** ********, ***** were *** ***** ***** **** ********* in ***** ** ***********.

*********, *** *** ***** **** *** 44 ******* **** *** *** ***** to **** * ***** ***** **** authorized ** ******** ************, ** *** ************** ** *******'* national ******, ********. **. ******* **** *** ***** Examiner ****, *** ********** ***** ***********, only *** ******, *** *** ***** governments, **** *** ********* ** ****** CCTV:

******* *** ******** ***** **** *** gardaí [***** ******], *** *********** ****** isn't *****.

Limerick ********: "****** *** ********* *** ********** *******"

*** ******** **** & ****** ******* released * *********** ******* **, ****, ******** **** it "** ****** *** ********* *** corrective *******" *** **** *** ***'* inquiry **** ******** "* '****** ** time'" ** *** ****'* **** **********:

******** **** *** ****** ******* ** continuing ** **** ******* *** ******** of *** *** *** ** ****** all ********* *** ********** *******.

*** *******'* *********** *** ** ** ensure **** ** ******** ** ******* the ******** **** ** *** ****** of ********.

*** ******** ** *** *** ******** a '****** ** ****' **** ******* to *** **** ****** ** ******** and *****'* ******* *** **** ******* undertaken ** *** *******.

*** ******** **** & ****** ******* said **** ** *** ****** *** LPR ************* *** **** ****** ********** and *** ******* *******.***** ********* *** ******** ****** ********** ******* ** **** "**'* ********** an ****** [** *** *** ********] is *** ***** **********."

*** ******** **** & ****** ******* declined ** ******* ** ****'* ********* for **** ******, *********** ******* *** prior **** ***** ********:

*** **** ******** **** ******** **** and ****** ******* ** ****** ** present *** *** *** ********** [*,*] ** **** ******. **** ** those *** ** *** *******.

Irish ********** ********: "********** *********" ** *** ********, ******** ****

******* *'*******(********), * ********-**** ***** *************** ********* serving ** ********* ** ***** ** *** ********** of ****** *********** *** ******, **** *** ******** ****** **** the *** ******** **** *** "********** horrified *** ****** *****":

********* ** ** *** ********** ********* and ****** ***** ** ***** **** our *** ***** ********* *** ************ prosecuted ** **** ***.

******** *'******* **** *** ******** ****** that ** ** "****** ***" **** Limerick ** *** **** ** *** ~89% ** *** ********* **** ******* and ********* ** ***** ** *******:

** ** ****, *** ****, **** we ****. ** **** ** **** sure **** ********** ** **** ** the ***** ******* ***** **** *** future ******* ** ****** **** * garda [*********] ** ***** **** **********. They (*******) *** *** ******, *** they *** * *********.

Only ***** *** **** ********* ** ** ****** ** ****** ** ****** ** *** *** ** ****. [emphasis added]

******** *'*******'* ******* **** ******** **** government ********* *********,**** ** ** ***** *******. ********* ******** *** ***** **** ** aid ** ***** *********,********* **** ****** **** *** ******** of ******* **** ** *********** ** effective *** ************* ******* * ********** ********* ** crime.

Journalist ********: "*** *** ** ** ***"

***** *** ***** ******** ***** **** Limerick "*** ****** ** **** **** totally ********* ****" ****, ******** ***********, *******'******** ******* *****, ***** ******* *********** ** ***********á* *******(********) ******** "*** *** ** ** *** **** the ***** ***** *** *** ****** gardaí **** ******* ** ***** *****." **. ******* ****** ******** "* model ******* ** * ***** ********* working ****" ****** *** ******** **** [aside **** ******** *'*******] ** *** in *******'* ********** *** ********* *** DPC ******** ** ********* ** ***** of *** ******** **********:

******** ** ***,nobody ** ********** **** ** *** ******* ** *** *******. When asked for its views on the case, there was no response from Eamon Ryan's Department of Communications, Helen McEntee's Department of Justice, or Darragh O'Brien's Department of Local Government. The word in Limerick is the CCTV cameras might even have to be taken down. As **** ** *** *********' **** ****** *** ***** ******, ****'* ****'* *********. *** *** ** ** ***. [emphasis added]

Irish ******* *** ***** *********: ******* ********, "**********" "***-**********"

**** ******** ******** ******* *** ***** *********(****) ***** ** **** **** *** organization "******** *** *** ********," ********* what *** ********* ** "* **** misunderstanding ** **** ********** ********** ****** Ireland" ** ********* ** ********'* "**********" GDPR *** ***** **** ********** "***-**********":

**** ******** *** *** ******** ** illegal *** ** **** ** ******** County *******.We ******* ***** ** * **** **************** ** **** ********** ********** ****** *******, and this may be the shock that's needed to instigate improvement. The ***** ** ***-********** ******** ** *** *** ****** ** **********, and there are serious concerns about the use of what are described as 'facial detection' cameras as part of the council's Smart CCTV Project.

** ********** *** ******* ** ****** laws ** '***' * ********* ******* but *** **** ** ** **** data ********** **** ** ******* *** fundamental ******. **** ********** *** ***'* red **** ** ** ********. ** must *** ** ******* *** **** that *** ***** ** ******* ** all; ** ****** ** ****** *** the *********** ****'* ******** *** **** we ****.

**'* **** ******* **** *** *** is ******** *** ***** ********* **** State ************ ** **'* ********* * very ***** ******* **** ** **** many ******** **** **** ** ** resolved. [******** *****]

EU ********* ****** ******* ****** ** ****** ************

*** ******** ********** ** *** ******* instance ** ** ********* ****** * tough ****** ** ****** ************.*** ***'* ****** ************ ****** **** Limerick **** ** **** ** ****** the ***** ****** **************'* ************* *** all ** *** ~**% ** *** city's ******* ******* * ***** ******** *********** ********** *** ******* ********* *** support *** * *** ** ****** mass ************ ** ****** ******. ** ***** ** ***** *************, it ******* *** ** ** **** if ******** **** ********** ** ******* to ********* *** ******** ** *** CCTV *******.

***** ****** **** *********** ******* ****'* ********* ******* ******** *, **** ** €* = **$*.****.