DIVIS INFO
GDPR expands information requirement for video surveillance in non-public areas
Request your free templates at DIVIS!
Bordesholm, May 4, 2018
By now probably everybody knows that the new GDPR becomes effective on May 25th. In addition to many other changes, a number of additional regulations on the “information requirements” will become effective for companies with video surveillance in action. The new information requirements for non-public areas with video surveillance are regulated in Article 13 of the GDPR.
We would like to inform you about the details and introduce our free templates.
Extended information requirements starting by the end of May
The information obligation itself is not new and commonly known. Even the currently valid Federal Data Protection Act (BDSG) contains binding regulations on that.
However, the requirements will increase sharply from May 25, 2018 onwards. The currently common texts on the signs informing about video surveillance are then no longer sufficient. There has to be a lot of information added. These must be immediately recognizable and well readable. As part of our services, we consider it necessary to inform our customers about these new legal requirements.
We also hold updated signage templates ready for you.
In addition to the signposting to indicate video surveillance in DIN A4 format, the new regulations also require the publication of an information leaflet also in the form of a sign in DIN A3 format with mandatory contents.
For both notices our customers will receive a FREE template (available in three language versions: German, English, French) on request or it can be purchased as printed signs for a fee directly from us. If you are interested in our free templates for information sign and information sheet, also if you are interested in the paid signage production, please contact our sales department directly.
Background of the new regulations
According to Article 12 (para. 7) of the GDPR, the mandatory information must be designed and presented as follows:
The information must provide a meaningful overview of the intended data processing. This must be presented in an easily perceptible form and formulated in an understandable and clearly comprehensible manner. In order to meet this requirement, even in the case of very extensive transparency obligations, a graded disclosure of information is recommended (see recital 58).
THAT MEANS
Before entering the relevant area, a sign with the essential information must be clearly visible.
A detailed information sheet must be posted or kept available in another accessible location.
- Hinweis auf den Umstand der Beobachtung z.B. durch ein Piktogramm des Kamerasymbols
- Angabe der Identität des für die Videoüberwachung Verantwortlichen
Angaben gem. Art. 13 Abs. 1 lit. a, d.h. Name und Kontaktdaten des Verantwortlichen und ggf. seines Vertreters (dabei genügt die Angabe der Funktion, der Name ist nicht zwingend anzugeben)
- Kontaktdaten des betrieblichen Datenschutzbeauftragten (bDSB)
Sofern ein bDSB bestellt, sind dessen Kontaktdaten anzugeben, Art. 13 Abs. 1 lit. b
- Angabe der Zwecke und Rechtsgrundlage der Datenverarbeitung Art. 13 Abs. 1 lit. c
- Angabe des berechtigten Interesses
Sofern die Verarbeitung auf Art. 6 Abs. 1 lit. f beruht, sind die berechtigten Interessen, die von dem Verantwortlichen oder einem Dritten verfolgt werden gem. Art. 13 Abs. 1 lit. d anzugeben
- Dauer der Speicherung für die personenbezogenen Daten
oder, falls dies nicht möglich ist, die Kriterien für die Festlegung dieser Dauer, Art. 13 Abs. 2 lit. A
- Hinweis auf Zugang zu den weiteren Pflichtinformationen
Artikel 13 Absatz 1 und 2 DSGVO (wie Auskunftsrecht, Beschwerderecht, ggf. Empfänger der Daten).
Source: Information_Transparenzpflichten_DSGVO.pdf | Information Sheet of the State Commissioner for Data Protection Niedersachsen | Hanover
INFORMATION LEAFLET
Article 13 para. 1 lit. e and f and para. 2 lit. b to f of the GDPR inform about which contents the detailed information sheet must include. The authority recommends a minimum format of DIN A3 for optimal readability. The sheet is intended to provide data on affected persons with regard to their personal data and other information.
This includes information about the data subject's right to:
- Request disclosure
- Object data collection and processing
- Request deletion
- Complain to the supervisory authority
Quelle: Information_Transparenzpflichten_DSGVO.pdf |Informationsblatt der Landesbeauftragten für den Datenschutz Niedersachsen | Hannover
Is it necessary to take action? Yes!
The Land Commissioner for Data Protection of Lower Saxony clarifies that an intransparent video surveillance is not in line with the GDPR (Articles 5 and 13 GDPR) and can therefore be fined by the supervisory authority and demanded to remedy the deficiency. An interesting aspect for the GDPR, which is important for every company, is its intentionally high level of provisions on fines.
A final note
We strongly recommend that you have the video concept discussed with you and the associated information requirements as well as our templates for video signage checked by your data protection officer or specialized lawyer. In view of the complex legal situation, we can not guarantee that the equipment you operate and the processing of the data collected comply with all the requirements of the new data protection law. Also the provisions of the Legal Advice Act do not allow us to give any legally binding advice and therefore we can not guarantee for this information to be complete, correct and binding from a legal standpoint as part of our services.
