Municipal authorities are required to conduct a Data Protection Impact Assessment (DPIA) and submit it to the Personal Data Protection Authority for prior consultation and approval before installing Closed-Circuit Television Surveillance Systems (CCTV) in parks and other public spaces, notes the Commissioner for the Protection of Personal Data, Maria Christofidou.
In a statement issued on Monday, in light of the public debate regarding the installation of video surveillance systems by municipal authorities, the Commissioner for the Protection of Personal Data clarifies that the installation of CCTV systems in public spaces falls within the municipalities’ jurisdiction regarding security and civil protection and is permitted, in accordance with the Municipalities Law, for the purposes of preventing vandalism, fire, and environmental hazards, provided that the General Data Protection Regulation (GDPR) and applicable national legislation are complied with.
ΣΧΕΤΙΚΑ ΑΡΘΡΑ
The installation and operation of CCTV systems may constitute a legitimate measure, provided that it is necessary and proportionate to the specific purpose and is implemented with appropriate safeguards for the protection of personal data, she states.
The Commissioner notes that, within the framework of the GDPR, it should be examined, among other things, whether the intended purpose can be effectively achieved through less intrusive means.
Furthermore, she points out that where the installation of CCTV is deemed necessary, the cameras’ field of view should be limited to what is strictly necessary in order to avoid, to the extent possible, the unjustified recording of individuals or areas unrelated to the intended purpose.
At the same time, the retention period for the footage, the individuals who have access to it, as well as the technical and organizational security measures should be determined based on the specific purpose and circumstances of each case.
According to the Commissioner, citizens should be adequately informed about the operation of the KKBPs and the processing of their data.
As she notes, Data Protection Impact Assessments submitted by municipal authorities are currently under review by her office as part of the previous consultation.
Furthermore, it calls on municipal authorities intending to install CCTV systems to conduct a Data Protection Impact Assessment (DPIA) and submit it to the Authority, in accordance with the obligations arising from the General Data Protection Regulation (GDPR).
Finally, it notes that the protection of personal data does not constitute an obstacle to the installation of such systems, but requires that they be designed and implemented in a lawful, necessary, and proportionate manner, with respect for citizens’ fundamental rights.
Source: KYPE
