Video surveillance is the monitoring of rooms or areas using optical-electronic equipment, and it is permitted under data protection law if it is necessary and proportionate.
Legal basis
Private companies generally base video surveillance on their legitimate interest, for example protection against theft or vandalism. This must be balanced against the interests of the people filmed. Areas such as changing rooms, toilets or break rooms are off limits.
Video surveillance must be made apparent by clearly visible signs that contain the key information and refer to the full privacy information.
Retention period and employees
Recordings must be deleted as soon as they are no longer needed. The supervisory authorities regularly consider a retention period of up to 72 hours appropriate; longer periods must be justified.
Where employees are recorded, the works council has a right of co-determination. Systematic large-scale monitoring of publicly accessible areas requires a data protection impact assessment.
Legal provisions
- Art. 6(1)(f) GDPR
- Legitimate interest as the legal basis for private operators.
- Section 4 BDSG
- Video surveillance of publicly accessible areas.
- Art. 35(3)(c) GDPR
- Data protection impact assessment for large-scale monitoring.
- Section 87(1) no. 6 BetrVG
- Co-determination of the works council.
Related terms.
Legitimate interest / balancing of interests Legitimate interest is a legal basis under which processing is lawful if it is necessary for the purposes of legitimate interests and the interests of the data subject do not override them. Art. 6(1)(f) GDPR Data protection impact assessment (DPIA) The data protection impact assessment is a structured risk analysis for processing operations that are likely to result in a high risk to data subjects. Art. 35 GDPR 