HomeIco

Home

 InternalIco

Internal

 GlobalIco

Global

 ContattoIco

Contatto
it

Utilizziamo cookie tecnici per personalizzare il sito web e offrire all’utente un servizio di maggior valore. Chiudendo il banner e continuando con la navigazione verranno installati nel Suo dispositivo i cookie tecnici necessari ai fini della navigazione nel Sito. L’installazione dei cookie tecnici non richiede alcun consenso da parte Sua. Ulteriori informazioni sono contenute nella nostra Cookie Policy.
Consulenza legale, Consulenza fiscale, Audit, Servizi in outsourcing Media Pubblicazioni Newsletter Data Protection Bites Data Protection Bites 8/2019 New short data protection information for video surveillance

New short data protection information for video surveillance

PrintMailRate-it

​On 10th July 2019, the European Data Protection Board  (“EDPB”) adopted its draft Guidelines, that are still subject to approval, on the processing of personal data through video surveillance (no. 3/2019).


These guidelines aim at giving guidance on how to apply the General Data Protection Regulation (“GDPR”) in relation to processing personal data through video devices and introduce a new short data protection information for video surveillance. 

The EDPB reiterates that the principles applicable to the processing of personal data, as set out in Article 5 of the GDPR, always apply when using video devices. In addition, video surveillance should be a “reserve measure”, to be used only when the same purpose cannot be achieved in a less intrusive manner.

Will these Guide Lines supersede the provision of the Italian Data Protection Authority dated 8th  April 2010? It is therefore questionable to what extent the provision of the Italian Data Protection Authority needs to be updated and/or integrated in relation to the short information (the extended one is confirmed).

The new EU template of short data protection information – to be located close to the video cameras (more generally at the height at which the natural person is to be filmed) - contains more elements than the current one such as:
  • the contact details of the Data Protection Officer (if available) and its contact references;
  • a summary list of the rights of the data subject; 
  • the QR code;
  • the indication of retention and of any transfer of data;
  • the purpose of the processing as well as the legitimate interest of the data controller;
  • the identity of the data controller;
  • a recalling to the “second level” (i.e., extended information).

The extended information shall be easily accessible, e.g. through information sheets at the data controller’s reception or on the data controller's website.

The EDPB’s Guidelines focus on a type of processing that has become ordinary business and, due to the ever-advancing technologies, video analysis also based on algorithms is a frequent occurrence. It is therefore highly recommended that manufacturers and end users use appropriate management systems. In this way, the rights and freedoms of the data subjects who have been filmed and analyzed can be effectively protected.

Pursuant to article 35 GDPR, the so-called “data protection impact assessment” (D.P.I.A.) shall be performed in case of video analysis algorithm for the evaluation of the adherence to the data protection principles as well as the associated risks, in order to prepare adequate measures for their accomplishment.

Given the principle of accountability, the data controller shall take any appropriate technical and organizational measures to demonstrate that the processing is carried out in accordance with the GDPR.

Contact

Contact Person Picture

Nadia Martini

Avvocato

Partner

+39 02 6328 841

Invia richiesta

Profilo

Rödl & Partner Italy

Discover more about our services in Italy:

Data Protection Bites

Our newsletter aims at collecting updates, news and insights on data protection matters worldwide, with a special focus on the GDPR. Read all releases »
Skip Ribbon Commands
Skip to main content
Deutschland Weltweit Search Menu