Irish City Fined $120,000+ for 400+ Camera System Violating GDPR

By Robert Wren Gordon, Published Jan 31, 2022, 10:11am EST (Info+)

Ireland's data protection watchdog has reprimanded and fined one of the country's biggest cities over $120,000 for non-compliance with GDPR and Irish data protection legislation for its 400+ camera video surveillance system.

IPVM Image

In this report, IPVM examines the Irish Data Protection Commission's inquiry and the Irish city's response.

Related, GDPR Enforcement Against Video Surveillance - 79 Fines Analyzed.

Executive *******

*******'***** ********** **********(***) *** ***** *** ********** ** the *******'* *****-******* ****,********, €***,*** (**$***,***)* *** ******** ********* of **** *** ***** **** ********** legislation ***-**********. * ****–**** *** ******* found **** ******** *** "** ****** basis *** *** ********** ** ******** data" *** *********** ****** *** ***** government **** ********** ******** **** ***** it ***** *********** * ***** ***** for ***** **.

** *** ****** ******, **** *********** would *** ****** ***** *** ** has ** ********** ********** ** *** EU's ****.

*** ******** ******* *** *** ***'* decision ********** *** ***** ** ********* the **** ***** *********' ********* **** ******* **** collection ** ****** ******.

******** ************* **** **** ** * ************* *** ******* **** *** **** uninstalled, *** *** *************** **** ******* the **** **** **** ********. ** is ******* ***** ******* **** ********** be *******, ** **** ******** ******* on ************ **** ****** *** ***** take ** ** *** ******.

**********

IPVM Image

********** *** ******** ** *******'******-******* ********* ****** *** ****, ************. *** city, ************ ** *********** **** & ****** *******, ********* *** * ***-****** **** deployment, ***** ******* ** *** "***** CCTV *******/******," ***** ** ***** **** to ****** ****. ***** *** ******* are *** (***** ** ******* ** ANPR) *******, ** ******** ** ******.

**** *** ****** ** ****** ***** manufacturers *** ******* ** *** ******** implementation.

DPC *******

IPVM Image

*******'***** ********** **********(***),*********** ** **** ** *** ****** of *** **** ********** ************, ******* ****** ** *******'* **** supervisory *********:

The *** ** *** ***** *********** ********* *** *** ******* **** ********** ********** (****), and also has functions and powers related to other important regulatory frameworks including the Irish ePrivacy Regulations (2011) and the EU Directive known as the Law Enforcement Directive.

*** *** ********* ** '***-******** *******' into ********'* **** ********** ** **** 2018. (** *** ******* ** *** DPC, ****** ******* ** *********** **** ** '***-******** *******' "***** **** *** *** ** ****** on *** ************* ** *** *** initiative ******* * ********* **** * third *****.")

** ********* *** ******** *******, *** DPC, ***** ****** *** ******** **** modified ** *******'***** ********** *** ****, ***** **** **** ***** ** May ** **** ****, **** **** that ** ****** ** ***** ********** and ************** ******** *********** *** **** deployment ** *** ******** ** *******'* third-largest ****:

*** ******* ****** ** ****** ******* Limerick **** *** ****** ******* *** processing ******** **** ** ********** **** the **** *** *** **** ********** Act ****. *** ******* ******** * number ** *** *******’* ********** ********** including *** *** ** **** *******, Automatic ****** ***** *********** ********** *** drones ** ****** ****** ***** **** used *** *** ******** ** *********** crime ** ***** ********.

DPC ********

IPVM Image*** *** ********* *** **** ********(********) ** *** ******** ************** ** December **** ********* * *****-***-*-****-**** *************.

** * ******* ** *** ********, *** *** ******** **** *** Limerick **** & ****** ******* **** had * ***** ***** *** ** of *** *** **** ******* *** that ** *** ** ***** ***** for *** *** ** *** *******:

  • *** ******* *** ** ****** ***** for *** ********** ** ******** **** by **** ******* *** ******* ********** purposes.
  • *** ******* ****** * ****** ***** for * ****** ** **** ******* used *** *** ******** ** ********** crime ** ******* ** ******* ** demonstrate ** *** ******** * ***** Commissioner ************* ******** ** ******* **(*) of *** ***** *í***á** *** **** which *** ************ *****, ******* *** foreseeable ** ********* ** *** ****.
  • *** ******* ****** * ****** ***** to ***** *** ************ **** **** cameras ***** ******** ********* ****** ***** Recognition **********.
  • *** ******* ********* ******* ** ** the **** ** ********* ******* ****** requests ** ******* ** **** ******* used *** ******* ********** ********.
  • *** ******* *** *** ****** *** transparency *********** ***** ******* ** ** failing ** ***** ******* ** ******* of *** **** ********** **********.
  • *** ******* ********* ******* ** ** the **** ** ******* ** **** its **** ****** **** ****** ********** and ***********.

GDPR *************

IPVM Image

** ******** ** ******* * ***** basis *** ~**% ** *** **********, which *** *** ***** ** ** an ************ ** ******* * ** the ****, *** *** **** ***** Limerick ** **** ********* ** ** least **** ***** ******** ** *** GDPR *** ** *** ******* ** erect ****** ******* (**** ******* **), failure ** ****** ************ *** ************* (GDPR ******* **), ******* ** ******** proper ****** **** (**** ******* **), and *** ********* ****** ******** (**** Article **).

DPC ***** ********, ****** ********* ****

*** *** ****** ******** ********* **** on ********, ********* * ********* *** on ***, ** **** ** * €110,000 (**$***,***) **** *** **** **********:

  • * ********* *** ** *** ********** of ******** **** **** **** ******* at * ****** ** ********* **** for *** ******** ** ******** *** enforcement ***** * ***** ***** *** be **********.
  • * ********* *** ** *** ********** of ******** **** **** **** ******* used *** ******* ********** ******** ***** a ***** ***** *** ** **********.
  • ** ***** ** ******** **** *** County ******* ** ***** *** ********** of ******** **** **** ********** ****** certain ******* ********* ** *** ********.
  • * ********* ** ******* ** * number ** ******** **** *** ****** Council’s *************.
  • ** ************** **** ** €***,***.

*** *** ***** **** *** ******** components ** *** ******** **** **** in ** ***** ** ****:

The *** ***** *** ******* €**,*** *** ********** ******* ** ** *** ****. Article 15 of the GDPR entitles the data subject to access personal data from a controller. The Council infringed Article 15 by refusing access requests from data subjects in respect of the CCTV cameras it operated in the city centre for monitoring traffic.

The *** ***** *** ******* €**,*** *** ********** ******* ** ** *** ****. Article 13 requires controllers who collect personal data from data subjects to provide details such as the identity of the controller who is collecting the data, the contact details of the data protection officer, the purposes for which the personal data is being processed etc. The Council infringed this provision by failing to install signage which would have given notice to the public that their personal data was being processed by the Council. Without this signage members of the public would have been unaware who was the controller of the cameras which would have impeded their exercise of their rights under the GDPR. The Council also infringed Article 13 for failing to provide the required information on the traffic management cameras on their website.

The *** ***** *** ******* €**,*** ** ***** **** ****** *** *** ****** ********** *** ***********. It was not readily visible on the Council’s website and it also did not state the Council was the controller of the traffic management CCTV cameras. [emphasis added]

DPC: **** "*************, **********"

**** ****,**** ************ *** ****** **** **** ****** 30 ********* *** **** ~$*,*** *** that ******* *** *** ** ***** any ****-******* *****. **** *** ******** decision, *******'* *** *** *** ****** one ** *** *********'* ******* ****-******* fines ** €***,*** (**$***,***).

*** *** **** **** **** *** blockbuster **** ** "*************" *** ***** the "******* ******" ** ********'* **** infringements:

IPVM Image

*** *** ***** *** ******* ** it *** ********** * *************, ********** and ********* ******* ** ***** ** the ************* *********** *** *******’* ************* of *** **** *** *** ******* nature ** *** *************. ** ***** the **** ******** ** €***,***.

DPC ****** ************: ******** **** "********* *****"

IPVM Image

**** *******, *** ***'* ****** ************, **** of ********** ********, ******** *** ********* upon *** ******'* ******** ** *** January **** ******** ********* ** *** Irish ******** ********* (*,*).

**. ******* **** *** ***** ******** that ******** "***** *** ** ** outlier" ***** ***** ****** ** ***** for *** ********* *** ** ****, a **** **** ** ****** ** well-known ** ***** *********:

*** ****'** **** **** ***** ***** we ***** ************* ** ********* ****. I ***** **** **** **** ***** something ** ********* ***** ****. [emphasis added]

*** ******** **** & ****** *******, which *********** ***-***** ***** ******* ******** city ****** ** ******** ** *** City ** ******** ******, ******** ** its **** ********** ******* ** ******** with *** ***** *****, ********* ** Mr. *******:

* ****** ** *** *******, * looked ** *** ******** ********, ***** were *** ***** ***** **** ********* in ***** ** ***********.

*********, *** *** ***** **** *** 44 ******* **** *** *** ***** to **** * ***** ***** **** authorized ** ******** ************, ** *** ************** ** *******'* national ******, ********. **. ******* **** *** ***** Examiner ****, *** ********** ***** ***********, only *** ******, *** *** ***** governments, **** *** ********* ** ****** CCTV:

******* *** ******** ***** **** *** gardaí [***** ******], *** *********** ****** isn't *****.

Limerick ********: "****** *** ********* *** ********** *******"

*** ******** **** & ****** ******* released * *********** ******* **, ****, ******** **** it "** ****** *** ********* *** corrective *******" *** **** *** ***'* inquiry **** ******** "* '****** ** time'" ** *** ****'* **** **********:

IPVM Image

******** **** *** ****** ******* ** continuing ** **** ******* *** ******** of *** *** *** ** ****** all ********* *** ********** *******.

*** *******'* *********** *** ** ** ensure **** ** ******** ** ******* the ******** **** ** *** ****** of ********.

*** ******** ** *** *** ******** a '****** ** ****' **** ******* to *** **** ****** ** ******** and *****'* ******* *** **** ******* undertaken ** *** *******.

*** ******** **** & ****** ******* said **** ** *** ****** *** LPR ************* *** **** ****** ********** and *** ******* *******.***** ********* *** ******** ****** ********** ******* ** **** "**'* ********** an ****** [** *** *** ********] is *** ***** **********."

*** ******** **** & ****** ******* declined ** ******* ** ****'* ********* for **** ******, *********** ******* *** prior **** ***** ********:

*** **** ******** **** ******** **** and ****** ******* ** ****** ** present *** *** *** ********** [*,*] ** **** ******. **** ** those *** ** *** *******.

Irish ********** ********: "********** *********" ** *** ********, ******** ****

IPVM Image

******* *'*******(********), * ********-**** ***** *************** ********* serving ** ********* ** ***** ** *** ********** of ****** *********** *** ******, **** *** ******** ****** **** the *** ******** **** *** "********** horrified *** ****** *****":

********* ** ** *** ********** ********* and ****** ***** ** ***** **** our *** ***** ********* *** ************ prosecuted ** **** ***.

******** *'******* **** *** ******** ****** that ** ** "****** ***" **** Limerick ** *** **** ** *** ~89% ** *** ********* **** ******* and ********* ** ***** ** *******:

** ** ****, *** ****, **** we ****. ** **** ** **** sure **** ********** ** **** ** the ***** ******* ***** **** *** future ******* ** ****** **** * garda [*********] ** ***** **** **********. They (*******) *** *** ******, *** they *** * *********.

Only ***** *** **** ********* ** ** ****** ** ****** ** ****** ** *** *** ** ****. [emphasis added]

******** *'*******'* ******* **** ******** **** government ********* *********,**** ** ** ***** *******. ********* ******** *** ***** **** ** aid ** ***** *********,********* **** ****** **** *** ******** of ******* **** ** *********** ** effective *** ************* ******* * ********** ********* ** crime.

Journalist ********: "*** *** ** ** ***"

***** *** ***** ******** ***** **** Limerick "*** ****** ** **** **** totally ********* ****" ****, ******** ***********, *******'******** ******* *****, ***** ******* *********** ** ***********á* *******(********) ******** "*** *** ** ** *** **** the ***** ***** *** *** ****** gardaí **** ******* ** ***** *****." **. ******* ****** ******** "* model ******* ** * ***** ********* working ****" ****** *** ******** **** [aside **** ******** *'*******] ** *** in *******'* ********** *** ********* *** DPC ******** ** ********* ** ***** of *** ******** **********:

IPVM Image

******** ** ***,nobody ** ********** **** ** *** ******* ** *** *******. When asked for its views on the case, there was no response from Eamon Ryan's Department of Communications, Helen McEntee's Department of Justice, or Darragh O'Brien's Department of Local Government. The word in Limerick is the CCTV cameras might even have to be taken down. As **** ** *** *********' **** ****** *** ***** ******, ****'* ****'* *********. *** *** ** ** ***. [emphasis added]

Irish ******* *** ***** *********: ******* ********, "**********" "***-**********"

**** ******** ******** ******* *** ***** *********(****) ***** ** **** **** *** organization "******** *** *** ********," ********* what *** ********* ** "* **** misunderstanding ** **** ********** ********** ****** Ireland" ** ********* ** ********'* "**********" GDPR *** ***** **** ********** "***-**********":

IPVM Image

**** ******** *** *** ******** ** illegal *** ** **** ** ******** County *******.We ******* ***** ** * **** **************** ** **** ********** ********** ****** *******, and this may be the shock that's needed to instigate improvement. The ***** ** ***-********** ******** ** *** *** ****** ** **********, and there are serious concerns about the use of what are described as 'facial detection' cameras as part of the council's Smart CCTV Project.

** ********** *** ******* ** ****** laws ** '***' * ********* ******* but *** **** ** ** **** data ********** **** ** ******* *** fundamental ******. **** ********** *** ***'* red **** ** ** ********. ** must *** ** ******* *** **** that *** ***** ** ******* ** all; ** ****** ** ****** *** the *********** ****'* ******** *** **** we ****.

**'* **** ******* **** *** *** is ******** *** ***** ********* **** State ************ ** **'* ********* * very ***** ******* **** ** **** many ******** **** **** ** ** resolved. [******** *****]

EU ********* ****** ******* ****** ** ****** ************

*** ******** ********** ** *** ******* instance ** ** ********* ****** * tough ****** ** ****** ************.*** ***'* ****** ************ ****** **** Limerick **** ** **** ** ****** the ***** ****** **************'* ************* *** all ** *** ~**% ** *** city's ******* ******* * ***** ******** *********** ********** *** ******* ********* *** support *** * *** ** ****** mass ************ ** ****** ******. ** ***** ** ***** *************, it ******* *** ** ** **** if ******** **** ********** ** ******* to ********* *** ******** ** *** CCTV *******.

***** ****** **** *********** ******* ****'* ********* ******* ******** *, **** ** €* = **$*.****.

Comments (4)

* *** ** *** ******* **** in *** ******** ******* *** ***** made *********. * ******* ***** ** also **** * *** ****** ** place.

Agree
Disagree
Informative: 1
Unhelpful
Funny

*. ***** ** *** ** ** not ***** **** ***** *** ****.

*. *** **** ****** **** ** have * ******* ***** ***** ** be ****** ** ************* *** ********. EU ** *** **** **** ***** you *** *** ******* ******** ******* asking. **** ** *** **** ***** here

*. ** **** ****** ** *** V8 ** *** ********** **** .... please *** ** ****

Agree
Disagree
Informative: 1
Unhelpful
Funny

*: *** ******** ***** ** ****** is ** *** ******** ******* *** not ************ ****** ******** ** *** the ***** ** ******** *** ******* this ** *** *** **** ***'* on *** ********* ** ***** ** product. **** ****** *** ********* ****** be ******** ** **** *********!

**** ********* ***** **** **** ******'* verify **** ********* *** ********, ***** my *******!!!

*: * ********** ***'* ***** ** is ** ****** ** ****. ***** are ******** ****** ** *********. ******'* run ** *** ******* ***'* * new ***** ** ***.

*: *** **? ** ******** ** GDPR ********* ** ** ***** ***** this *****. ** *** *****, ********** in **** ** **** ** ******** Council ** **** *** *** ********* of *** ******. ** *** **** going ** *** ****** ** *** law **** * ********* ***** *** can ******** ** * ****** *** at **** ****** ****** ******** *** things **** **** *** **** **** compliance, * ** *** ****** ** is ***** **** ****** **** **** it *** ****** ** * ****** job ***! **** ** *** ********* actions **** ******** **** ****** ** tracking *** ********* ***** **** ** probably ****** *** ** * ***'* know ******** ******* * ****** ******** comment ******* *** *** **** ** be ************ ****** ******** ** **** matter...

Agree
Disagree
Informative: 1
Unhelpful
Funny

*******'* *** (*** ****** ** ****** Works ** * ***** ***** ********** agency, ***** ******* **** ** *** Irish *****'* ******** *********) *** ********** banned ********** ** *** & *****.

** **** ********** ******** *******'* ******** Childers ******** ***** (*******) ************ *** yet ** ******* **** **** *** cameras.

******* ** ** **** ** **** go *** **** *** ** ******** Cameras

Agree
Disagree
Informative: 3
Unhelpful
Funny
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts reporting, tutorials and software funded by subscriber's payments enabling us to offer the most independent, accurate and in-depth information.
Loading Related Reports