Correct, the use of personal CCTV and video surveillance cameras is exempt from the requirements of GDPR and DPA only if they only capture images within the boundary of a person’s private domestic property (including the garden).Saint wrote: ↑Tue Mar 02, 2021 11:09 pmThey have a GDPR compliance issue. They need to show that they're not storing recordings of you entering or leaving if you've requested otherwiseLine6 HXFX wrote: ↑Tue Mar 02, 2021 5:59 pm When the people in the bottom flat decide that want to stick a camera in their window, that inadvertantly films people coming in and out of the building.
You write them a polite nice letter (you don't want to get the landlord involved), telling them you are a carer and you do not give them your consent, as the safety and security of the people you look after is being placed in jeopardy, and because I don't want to be filmed six times a day coming and going into my home.....and don't want people to know when I am away from the vulnerable people I take care of, or out of my flat, I'm weird?
Tempted to buy a camera and stick it on the wall, in the corridor, directed at their front door. See how they like it.
We can all have fun with gaw'damned cameras.
If images are captured of people outside the boundary of their private domestic property (e.g. a neighbour’s home or garden, shared/communal spaces or public streets) then they must comply with the GDPR and DPA in the use of the system and the personal data collected.
The ICO has published guidance on its website (Domestic CCTV systems – guidance for people using CCTV) which sets out the requirements:
Let people know you are using CCTV by putting up signs saying that recording is taking place, and why.
Ensure you don’t capture more footage than you need to achieve your purpose in using the system.
Ensure the security of the footage you capture – in other words, holding it securely and making sure nobody can watch it without good reason.
Only keep the footage for as long as you need it – delete it regularly, and when it is no longer needed.
Ensure the CCTV system is only operated in ways you intend and can’t be misused for other reasons. Anyone you share your property with, such as family members who could use the equipment, needs to know the importance of not misusing it.
Refry could also give them a subject access request, either verbally or in writing, and they would have to give him copies of all the personal data (images) they have of him, and must do so within a month.
If they fail to meet their GDPR and DPA obligations, they could be fined by the ICO.