GDPR Enforcement Against Video Surveillance - 79 Fines Analyzed

By Charles Rollet, Published Jun 07, 2021, 09:01am EDT

The arrival of the GDPR three years ago raised fears in European video surveillance of stringent enforcement and high fines, but an IPVM review shows overall enforcement is inconsistent and limited.

IPVM Image

While the median fine was low, the largest fine over $12 million and one security firm was fined $80,000 for the common and controversial practice of filming video surveillance with one's smartphone.

In this post, IPVM examines GDPR enforcement, what practices are most legally risky, which countries have the most enforcement, and GDPR compliance best practices. Plus, we include a spreadsheet detailing the 79 cases we analyzed.

Executive *******

**** **** ********* (** out ** **) **** issued **** ** **** one **** ***** ************ fine ** ***, ***** only *** ******* - Spain - *** ******* more **** ***** **** video ************ ***** ** total.

*** ****** **** ****** at ~$*,*** *** *** most ****** ********** *** filming ****** *****, ******* to ******* ****** *******, and ********* ********** *********. IPVM ***** **** *** security ***** ******* ** a **** **** ** far **** *********** ******* end ****-*******.

****'* ******** ******* ********** have *** ******* *** video ************ *** ****** enforcement ***** ******** ** infractions ** ******* ***-*****. However, **** *** ****** in *** ****** ***** due ** *** ****** popularity ** ***** ********* who *** ********** '**** Processors'.

IPVM ******** ** ***** *** ***** ************

**** **** ******* **** ********* ******* ******** ******************* ********* ****** * ******** of ***** ****** **** fine ********** ****** ***** surveillance ***** **** ** "CCTV", "******", "***** ************", etc.

IPVM Image

**** **** ******** ***** of ***** ****** ** every **** ********** ********* to *** *** ***** the ******* ******. *** tracker *** ******* ********, even ********* **** ***** than **** **** ****** publicly.

****** ****'* *********** ** 79 **** ***** ************ fines** ** ******** *********.

IPVM Image

Many ********* **** ** ***** ** ***

** *** ** ** GDPR ********* ****** ** video ************ ***** ** all *** ******* * only ****** ***. *******, large ******* **** *** UK ****** * ***** while ****** ****** ***:

IPVM Image

***** *** ** *** the **** ******, **** 35 *****. *** ***** was ** *******; *** second-highest ****** ** ***** was ******* **** *, still ***** *** *** a *****-**** ******.

Top ***** ******* *** *****

*** *** ***** ******* for ***** *** ******* public ** ******* *****, monitoring *********, *** ******* to ******* ****** *******:

IPVM Image

Filming ****** *****, ********** ********* ********* ******* ********

********** ********* ***** **** filming * ****** **** like * ****** (** a ******* **** **** a ********'* ********) *************** *, ***** ******** ********** of ******** **** ** "******* ** **** ** necessary ** ******** ** the ******** *** ***** they *** *********". *** example, ** ******** ******* shop ******** ****** $*,****** ********** * ****** which *** ******** ** film ** ******** *** also ****** * ****** thoroughfare.

********** ********* *** **** often ***** ** ******* Article * **** ******* spaces ****** *********** (**** locker *****) ** **** less ******** ******* **** possible. *.*. * ***** French *********** ********** ******** ********** ******* ********* at ***** *****.

******* ** ******* ****** Violation

********** ******* ******* ****** signage *** **** * common ****, **** ********** finding ************ *** ****'******** ** ('*********** ** be ********').********* **** ********* ***** for *** ****** *** signage **********. ******** *** GDPR ******** ** ******* 13 **** ******** ******* be ******** ** *******, IPVM ***** *** ******** any ***** *** ******* including ********* ** ************ details.

********* *** ******* ******* On ***********

******* ******* ******* *** end-users *** ******** ****** video ************ ******* **** their ********** *** ****** it **********, **** **** found ** ******* ******** 5,* (********** ** **********), ***** ('******** ** **********').*** *******, * ********* supermarket *** ***** ***** for *** ******** **** violations ******** **,*** ***** (~$94,000) ***** ** ******** filmed ************ *******.

Median **** **** $*,***

*** ****** *** ******* worry ***** *** **** was ******* ********* ******* ** ******* ***** ($24.3 *******) ** *% of ****** *******, ********* is ******. *******, *** median **** ***** ************ fine *** ~$*,*** ***** is *** *************, *** still ********** *** **** companies.

Single **** ** ******* ***** $**.* *******

*** ******* **** ****** of ***,*** ***** ($***,***) is ********** ****** ** a **** **** ** Germany ***** * ******** regulator***** ****** ******** *****************.****.* ******* ***** ** $12.7 ******* *** ********** staff *** ********* *** "at ***** *** ***** with ** ***** *************". The ****** **** *** so **** **** ** constituted **% ** ***** Europe **** ***** ************ fines. ********* **** ****, European ********** ******* ***,*** (~$831,000) ***** ** ***** for ***** ************-******* **********.

IPVM Image

*****************.** *** ***** *** monitoring * **** ***** of ***** - **** as "**********, ***** ******, warehouses *** ***** *****" - ******* ****** **** invasive ******* **** "****** bag ******", *** ** Data ********** *********. *** ******* **** did *** "***** *** video ************ ** ******** employees ** * ******** period" ***** ****** **** recordings *** ** ****, "much ****** **** *********" EDPB ******.

*** **** ** ***** Saxony's ***,******* *****, ****** **** **** a "******* ********* ** workplace ************", ******* ********* that **** ****** ******* "permanent *** ***********" ******** surveillance "**** ** ***** criminals":

IPVM Image

**** ** * ******* case ** ********* ************. Companies **** ** ********** that **** ********* ***** surveillance ** * ***** violation ** ***** *********’ rights. ***** ********** ***** argue **** ***** ************ can ** *********** **** to ***** *********, **** does *** ******* *** permanent *** *********** ************ with *** ******** ****** of ***** *********. ** that **** *** ****, companies ***** ** **** to ****** ***** ************ without *****. ********* ** not **** ** ********* their ******** ****** **** because ***** ******** **** them ***** ******* *********

** ***** **** **** even ***** ** *****************.**, with *** ****** ******* fine ** **,*** ***** or ~$**,*** ***** ********* * ******* **** company*** ******* ** ******* a **** ********** ****** Assessment *** *** ************ system.

End **** *******

****** *** *** ***** were ****** ******* *** users, *** *** ********* considered '**** ***********'***** *** ****, *.*. *****, ***********, private *******, ***. ** manufacturers **** **** ** Hikvision **** *****. **** is ************ ***** *** users *** ********* ****** the **** ****** *** visible **********, **** ******* public ***** ** *** displaying *******.

Only *** ******** ********* *****

**** ***** **** **** two ******** ** ******** companies ***** ***** **** video ************ **********. *** first *** * ******** security **** ***** ******** recorded * ******'* ***** surveillance ******* ** *** cellphone, **** "****** ** with * ***** *****" causing "******* *** ********" to *** **** ******* in *** *******, ******** data ************* *********.

**** ***** $**,*** **** this ******** *** ********* Article ** ('******** ** **********'). *** ****'* ****** was************ "*********" ** ***** media; *** ******** *** director*********** *** "********* * message ** *********** *** processors **** *** **** must ** ***** *********, that ********* *** ****".

*** ***** **** *** in *****, ***** * security **************** ** ******** **** ********** ******* (legally, *** ******** *** be * ***) *** was ***** **,*** ***** ($60,700) *** **************** **, ***** ******** * DPO ** ** ******'* "core **********" ******* "********** monitoring ** **** ******** on * ***** *****".

Data ******* **** ****** ** **** **********

**** *** *** ****** disclose ***** *** **** complaints ********** *** **** allow ********* ********** ** well. *******, **** ******** were ********* ******* ** complaints, ******* **** **** employees ** ******* ********* deploying ***** ************, ********* who ******* ******* ******** at ***** ********, ** people *** *** ************ footage ** **** ****** on ****** *****.

vSaaS ***** **** ***** **** ********

****'* ******** ** *** suggest **** **** ********** is ***********, ** ***** do ****** *** *** GDPR ************** **** ***'* result ** * **** (which **** ******** **** not *****) *** ***** take ** **** *** resources. ****'* ****** **** indicate **** ******** ********** have *** ******* *** video ************ *** *********** yet, ********** ***** **** ********* instead.

*******, **** **** ****** as ***** ******** *******-**************** **** ******* ** Europe, ***** **** ***** providers ******** ****** ******** data *** **** ****** GDPR-liable '**** **********'. *** example, * ****/****** **** the******* **** ********* ******* *** ***** GDPR ***** **** ** to ****** ** ******, particularly ***** *******'***** ******** *********.

How ** ***** *****

*** **** *** ** avoid * **** **** or ************* ** ** comply **** *** ****. For ****** ** ********** this ***, **** ****'***** *** ***** ************ guide, ******* *** ****** ******* guide, *** *** *********** of *****'* ******** ***** ************ Guidelines.

******* **** *******'* **** Protection ********* ********** *** GDPR ***********, **'* **** good ** ***** ** your ******** *** *** issued * ******** ***** for ***** ************ **********.

Comments (3)

****** *** *** *********** good ****.

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny

*** **** *********** ** read ***** **** ** part ** *** ******** industry. ** **** ************* tried ** ****** **** privacy, **** ***** ** sanction ***** ******** ********.

******* *** *** **** educated ***** *** ********* to ****** *** ********* and **** ******** *** workshops **** ** ** done.

Agree
Disagree
Informative: 1
Unhelpful
Funny

*** ***************** *** ** interesting. ** ***** * shop ******** ** ******, especially *** ******* **** value ***** **** *****'* have ****? * ****** if * ******** **** the **** **** ******** on ******* **** ********* (I'm **** ****** ** it ****!) *** ******* would *** ***** ****? You **** **** ******* the ******* **** **** a ***** *** **** committed *** **** * process *** ***** *** around ****. *** ***** are ***** ******** ***** day *** **** *** anonymous ** *** ******** system ********* **** *** pixelated ****/**** ***** *** known ******** ** ***** occurs?

******* **** *** ***** about **** *** ** you *** **** **** of ********* ***** ******** more ** ****** *** this ******?

Agree
Disagree
Informative
Unhelpful
Funny
Read this IPVM report for free.

This article is part of IPVM's 7,208 reports and 960 tests and is only available to subscribers. To get a one-time preview of our work, enter your work email to access the full article.

Already a subscriber? Login here | Join now
Loading Related Reports