UK GDPR Video Surveillance False Fines Claims Investigated
Violating the GDPR is a common concern for businesses deploying video surveillance in Europe, and misleading statistics about fines can be used to capitalize on these fears.
In this post, IPVM examines what one survey said about GDPR fines, how industry publications, including IFSEC and Security Magazine, ran with the false claims, the reality, and what this shows about actual risks.
For background, see IPVM's GDPR For Video Surveillance Guide and GDPR Enforcement Against Video Surveillance - 79 Fines Analyzed.
Executive *******
***** ******** ** *** ** ******** outlets ******** ** ********* ***** ***** for **** ***** ************ **********, *.*.,*************** ********, *** ** ******* ****** **** finding ******** ** **** **** *** survey *** ****** ** ******* ****, and ***** **** *** **** "******** near" **** *** ********.
*** **** ************* **** **% ** *** ** retailers **** ***** *** **** ***** surveillance **********, **** **** ****** *% to *% ** ***** ****** ******** in *****.
*******, ** ********** **** *** ****** a ****** **** ***** ************ ****, and ***** ** ** ******** ** such **** ***** ******* ** ********* elsewhere ** ******.
Survey: **% ** ** ********* "******* *****"
** ****, * ******** *** "** *********" ** "*** subject ** ***** ************" *** *********:
* *** ******* *** **** **% of *** ** ********* "**** ******* been ***** *** ******** ****", **** most (**%) ******* ***** *% ** 4% ** ***** ****** ******** (** this *******, *******), * *********** ******, especially *** ********* **** *** *** margins:
******* ********/****** ***** ** *** ** and ** ******** *** ******'* **** finding:
- *****: **% ** ** ********* ***** for ***** ******* ********, ********* ** survey
- ******** ********: ** ********* ***** *** surveillance ******* **********
- ******* ******: **% ** ** ********* hit **** ***** *** ***** ******* breaches
- ****** ********** ******: **% ** ** retailers ******** *** **** ***** *** video ******* ********
Regulators '******** **** ****'
*** ****** *** ********* ********, * ** ******* ********* ****-******** ***** ********************* ******** **********. ********** *** ******** ******** **** ********** "****** ** be ******** **** ****" ** "****-************ of ** ********".
Zero **** ***** ************ ***** ** **
*******, **** ** *****, ** *** UK ********** *** *** ****** *** GDPR ***** *** ***** ************. *** Information ************'* ****** (***), ************** *** *** *****, *** **** ******* ** ***** in *** ****** *******, *** **** are ******* ** ***** ************; **** are *** ***************** *********.
**** **** ** *********** ** *** survey *** ** *** **** ********.
No ******** ** **** **** *****
*** ****** ***** **** **% ** the ** ********* *** **** ***** (i.e., *** *****) **** ***** ******* 2% *** *% ** ***** ****** revenue, ** ********* ****** ******* **.
**** ***** ***** ******** ******** ** UK ********* ****** * **** ** at ***** $*.** ***** *** "****** majority" ** *********** **** ******** **** $60m ***, ****** ******* ********** **** IPVM.
*******, **** ***** *** **** *** such ********. *** ****** **** ***** surveillance **** ** **** *****, ***** $3,900 ** ** ****, * ***** IPVM******** *****.*** ******* ***** ************ **** **** of * ******** **** ***** **** anywhere ** ****** *** ~$**,********** * ********* ***** ****.
Fines "*** ****** ******** **** **** *****"
****** ******** **************** ** **** *** ******'* ******* are *** *********."** **** ** *** *** ** the ** *** **** ****, '**'** not ****** ******** **** **** ***** of ****'," ******* ****.
******* ******** **** ********* ****** **** the ******:
- *** ******'* *********** **** ***** "*********** for ** *** ********" *** **** may *** **** ***** ******* ***** firm *** ******** ***** *** ********* the **** ** ***; "** **** guess ** **** **** ***'* **** what *** ***** ***," ******* ****.
- ******** *********** **** *** **** ******** may **** ************ ** *** ******.
- *********** *** **** ************* ******* ******* *** **.
- *********** *** **** ******** ***** ********* to ***** ************.
******* ********* **** ** ***** ****** in ********* *********** ***** *** ****** *** ******** (go ** *:** ** *** *****):
*******, ***** ** ** ********** ** update ** ******/****** ******'* *******, *** in *** ***** ******** ** *** survey.******* **** **** **** ****** ***** issue ** ****** *** "** *** thinking ** **-******* *** *****" *****.
****** *** ****** ******$*** *** ** ********* *** *** *** ** *********** ********.
No ***** ** ******* *********
***** **** ********** ** *********, ***** has *** **** * ******* ********** crackdown ** ***** ************ ** ***.
**** ********* *** ** ******* ** taking ******-***** ******** *********** ** **** regulators, **** ** ********** ***** ******* and *** ******* ****** *****.
*** ****, *** ****'***** *** ***** ************ ************ *********** ******* ***** ************ - 79 ***** ********.
UPDATE: ****** **** "****" ** ******
******: ****** *** ******** * **** ** *** ********** *** ******** "******** **** ** ICO ****, ***** ********* ** **** prevalence ** ***** ************ ******* ** video ************":
**** ** ******** ******** *** **** fines
*** ***** ********* ** **** **** surveyed *** ** *************. **** **** small ****** ******, *** *** ***** half ****** ** ** *** ******** in ***** ****** *****. *** ****** focused ** **** ***** *** **** fines.
*** ****** ******** ********, '**** *** ever **** ******* ** ********* ***** over *** ***, ******* ** ******** of ******** ****, ** *** ***** variation ** **** ** ******** ** video ************?'
* *********** **% ** *********** **** they *** ******** ****-******* ***** *** video ************. ************, *********** ******** **** average ***** ******** ** *% ** turnover.These ******** ******** **** ** *** ****, ***** ********* ** **** ********** ** ***** ************ ******* ** ***** ************. Possible explanations for the discrepancy may include the inclusion of fines unrelated to video surveillance, fines originating outside the UK, or multiple responses from the same retailer.
** **** ******** ** ****** **** the ******, ************ *** ******* *********** research ** ******* ********** *** ********** to ******** ****** ********* ** ****** privacy *** ********. [******** *****]
******** "** **** **********" ******* **** the *** *** ****** ** ***** 1 **** ***** ************ ****, **** the ******* ** **** ** *** issued *.
UPDATE: ****** ****** "***** *********"
****** ******* ****** * "***** *********"******** ****'* ******* "************* **** *** intent *** ********* ** ****** ******’* actions":
MEDIA ********* - **** *******
**** ********* * **** ******* ********* a ******, ******* *** ** ****** of ****** ******, **** *** ****** industry ** **** ****.
*** ****** *** ********* ** **** faith ** ****** ******* **** *** current ***** ************ ****** **** ** and ******** ************* ** ***** *** large ** ****** *************.
*** ****** *********, *********** *** ***** were ******* ** * ********* ****** research ****** ** **** **** *** market ******** ******* [***] **** ** conduct, ***** ** ***** ** *** ESOMAR **********; *** ****** *********** **** approved *** ***** ***** *******, ***** on *** ****.
*** ***** ****** ****** *** ********* and ****** **** *** *.*. *********** Commissioner’s ******, ***** ** ** ***** published.
********* *** ***** *******, **** ********* about *** **** **** ****** *** Secure ****** ******** * *****, ********* Chief *********, ***** *******, ********** *** discrepancy ******* *** ***** ******** *** ICO ** *********.
** ******* *** ******* ************* **** the ****** *** ********* ** ****** Redact’s *******.
*******, ****** *** *** ******* *** update ** ********** ** *** ******* until **** ******* *** *** **** article. *** ***** "********** *** ***********" was *************** ******** *** ******** ** ***** 1 ****** ** ******* ** **** the ***********; ** **** **** *** note *** ******* **** **** *** ICO *** ****** * **** ***** surveillance ***** ** ***.
****** / ****** ******'* ************ ******** ******** ********** ******* * *****:
***, ** **** **** * *** video ********* ***** ** ****:******* ********* **** ********* / ********* Test,***** ***** ******** **** ********* ******** Tested,**** **** ******* ****** ** ********* Tested,******* ******* ********* ******
**** ******** ** ******** ******* * niche, ****** ********* **** ******** ** the ** ****** *** **, ***** differences ** ********** ***.
******: ****** *** ******** * **** ** *** ********** *** ******** "******** **** ** ICO ****, ***** ********* ** **** prevalence ** ***** ************ ******* ** video ************":
**** ** ******** ******** *** **** fines
*** ***** ********* ** **** **** surveyed *** ** *************. **** **** small ****** ******, *** *** ***** half ****** ** ** *** ******** in ***** ****** *****. *** ****** focused ** **** ***** *** **** fines.
*** ****** ******** ********, '**** *** ever **** ******* ** ********* ***** over *** ***, ******* ** ******** of ******** ****, ** *** ***** variation ** **** ** ******** ** video ************?'
* *********** **% ** *********** **** they *** ******** ****-******* ***** *** video ************. ************, *********** ******** **** average ***** ******** ** *% ** turnover.These ******** ******** **** ** *** ****, ***** ********* ** **** ********** ** ***** ************ ******* ** ***** ************. Possible explanations for the discrepancy may include the inclusion of fines unrelated to video surveillance, fines originating outside the UK, or multiple responses from the same retailer.
** **** ******** ** ****** **** the ******, ************ *** ******* *********** research ** ******* ********** *** ********** to ******** ****** ********* ** ****** privacy *** ********. [******** *****]
******** "** **** **********" ******* **** the *** *** ****** ** ***** 1 **** ***** ************ ****, **** the ******* ** **** ** *** issued *.
****** ******* ****** * "***** *********"******** ****'* ******* "************* **** *** intent *** ********* ** ****** ******’* actions":
MEDIA ********* - **** *******
**** ********* * **** ******* ********* a ******, ******* *** ** ****** of ****** ******, **** *** ****** industry ** **** ****.
*** ****** *** ********* ** **** faith ** ****** ******* **** *** current ***** ************ ****** **** ** and ******** ************* ** ***** *** large ** ****** *************.
*** ****** *********, *********** *** ***** were ******* ** * ********* ****** research ****** ** **** **** *** market ******** ******* [***] **** ** conduct, ***** ** ***** ** *** ESOMAR **********; *** ****** *********** **** approved *** ***** ***** *******, ***** on *** ****.
*** ***** ****** ****** *** ********* and ****** **** *** *.*. *********** Commissioner’s ******, ***** ** ** ***** published.
********* *** ***** *******, **** ********* about *** **** **** ****** *** Secure ****** ******** * *****, ********* Chief *********, ***** *******, ********** *** discrepancy ******* *** ***** ******** *** ICO ** *********.
** ******* *** ******* ************* **** the ****** *** ********* ** ****** Redact’s *******.
*******, ****** *** *** ******* *** update ** ********** ** *** ******* until **** ******* *** *** **** article. *** ***** "********** *** ***********" was *************** ******** *** ******** ** ***** 1 ****** ** ******* ** **** the ***********; ** **** **** *** note *** ******* **** **** *** ICO *** ****** * **** ***** surveillance ***** ** ***, ******* ******* that *** ****** ** ***** ***** by *** ****** *** "**** ******" than ***** ******** ** *** ***. (IPVM **** *********** **** ***** ** this ******).
****** / ****** ******'* ************ ******** ******** ********** ******* * *****:
****, **'* ***** *** *** ******* turn *** **** *** '*********** ********' eh!
**** ****, *******. *** ****** ****** marketing ****** ** * ****** *** and, ** ***** ****, ****** ** getting ************ ***** ** *** ** as **** *********. **** ** *** time, *** ****** ***** *** ********-***** (how **** *** *** ****** ** X ** *** **** ** *** want *), ** ** ** *** easy ** ***** ** ********. **** one ****** ** ********.