Transcript
Page 1: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Click to edit Master title styleOpen Forum PRIVACY

Tuesday, 10th of December 2013

Page 2: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013 2

Agenda

1. 18:30 Welcome 2. 18:45 Cameras – Privacy Issues3. 19:30 Break 4. 19:50 Cameras – Privacy Issues5. 20:30 Close

Page 3: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013 3

Close

Page 4: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

CAMERAS – PRIVACY (AND

OTHER) ISSUES WITH

DASHCAMS, BODYCAMS

AND GOOGLE GLASSJOHAN VANDENDRIESSCHE & MARC VAEL

4

Page 5: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Proliferation of cameras

• Exponential growth of the number of cameras

• Technological advances (‘miniaturisation’)

• Decreased cost

• Multiplying possibilities

• Exact number of cameras is unknown

• Increase in notification is staggering

• Notifications relate to camera systems (no mention of number of cameras)

5

Page 6: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Proliferation of cameras

• Purposes of cameras are diverse

• ‘Private’ use

• Newsgathering

• Surveillance in various forms

• Workfloor surveillance

• Traffic surveillance

• Crime detection and prevention (?)

• Object of camera footage / photos is diverse

• Objects vs. persons

6

Page 7: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

High level legal framework

• Act of 8 December 1992

• Processing of personal data

• Camera Surveillance Act 21 March 2007

• Camera surveillance (crime detection andprevention)

• Camera Surveillance Decree 10 February 2008 (Notification)

• Camera Surveillance Decree 2 July2008 (Declaration)

7

Page 8: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

High level legal framework

• CBA n°68 concerning workfloorcameras

• Workfloor privacy

• Copyright Act of 30 June 1994

• Reproduction of copyrighted materials

• Personality rights

• Specific legislation

• Police cameras, football stadium

• E.g. draft legislation on police cameras (‘bodycams’)

8

Page 9: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Defining the applicable law

• Purpose of the camera system

• Surveillance

• Crime detection and prevention

• Nuisance detection and prevention

• Maintaining public order

• Workfloor surveillance

• Other purposes

• E.g. private purpose (video intercom, videophone, …)

9

Page 10: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Defining the applicable law

• Content of camera footage/photos

• Personal data

• Content covered by personality rights

• Copyrighted materials

• Combination of purposes and content may lead to a multiplication of applicable laws

10

Page 11: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Surveillance Camera

• Fixed or mobile observation system that collects, processes or stores images

• Surveillance purpose

• prevent, establish or detects crimes

• prevent, establish or detect public nuisance

• maintain public order

• Exceptions exist

• Workfloor surveillance (CBA n°68)

• Specific legislation

11

Page 12: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance

• Location based regime

• Unenclosed area

• Enclosed area accessible to the public

• Enclosed area not accessible to the public

• Data controller

• Accountability principle

• Applies in a cumulative manner with data protection legislation (lex

specialis)

12

Page 13: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Interdiction of covert cameras

• Implicit consent based on pictogram notification

• Access restrictions in relation to camera footage

• Only by or under the authority of the data controller

• Optional / compulsory communication to police authorities

• No violation of intimacy / sensitive data

13

Page 14: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Unenclosed area

• Decision by data controller

• Prior positive advice from municipality who consults the Chief of Police

• Unified notification (Commission and Police)

• Pictogram warning

• Not specifically aimed at another area not covered by the decision

14

Page 15: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Unenclosed area

• Restriction on real-time surveillance

• Only under police supervision

• Enable immediate intervention

• Purpose limitation in relation to recording

• Evidence gathering

• Storage restriction

• Maximum period 1 month

• Exception applies to footage that serves as evidence

15

Page 16: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Enclosed area accessible to the public

• Decision by data controller

• Unified notification (Commission and Police)

• Pictogram warning

• Not specifically aimed at another area not covered by the decision

16

Page 17: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Enclosed area accessible to the public

• Restriction on real-time surveillance

• Enable immediate intervention

• Purpose limitation in relation to recording

• Evidence gathering

• Storage restriction

• Maximum period 1 month

• Exception applies to footage that serves as evidence

17

Page 18: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Enclosed area not accessible to the public

• Decision by data controller

• Unified notification (Commission and Police)

• No notification in case of personal or household use

• Pictogram warning

• Not specifically aimed at another area not covered by the decision

• If private entry, measures to strictly limit surveillance of other areas

18

Page 19: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Enclosed area not accessible to the public

• No limitation on real-time surveillance

• Storage restriction

• Maximum period 1 month

• Exception applies to footage that serves as evidence

19

Page 20: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Surveillance cameras

• Mobile surveillance cameras

• Specific to police forces

• Mass meetings

• Specific legislation applies to some kinds of mobile police cameras

• Draft legislation in relation to mobile surveillance cameras outside mass meetings (‘bodycams’)

20

Page 21: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Other cameras

• Camera

• Fixed or mobile observation system that collects, processes or stores images

• No surveillance purpose

• Not covered by specific laws or by CBA n°68

• Usually covered by data protection law

• Processing of personal data

21

Page 22: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Other cameras

• Limitations in relation to the processing of personal data

• Very large legal interpretation to the concept of personal data

• Not necessarily sensitive information (although stricter rules apply to special categories of personal data)

• Camera footage / photos may be personal data

• Processing: “any operation or set of

operations which is performed upon

personal data […]”

22

Page 23: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Other cameras

• The data processing must comply with specific principles

• Proportionality

• Purpose limitation

• Limited in time

• (Individual and collective) Transparency

• Data quality

• Data security

23

Page 24: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Other cameras

• Personality rights

• Prohibit the making, distributing and publishing of portrait of a person

• Personal right

• No absolute right

• Public persons acting in their public capacity or during a public activity

• Photo of a public area without aiming at a specific person (the person is accessory to the picture)

24

Page 25: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Other cameras

• Copyrighted content

• Copyright = exclusive right on exploitation of copyrighted materials

• Exception: private use

• Camera footage / photos for personal use: in principle no problem

• Commercial exploitation: consent from copyright holder is required

25

Page 26: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Workfloor cameras

• Camera system on the workfloor

• Specific CBA to balance employers’ rights and employees’ (privacy) rights

• Purpose limitation

• Health and safety

• Protection of company property

• Supervision of the production process

• Supervision of the work of the employee

• Purposes must be explicitly defined

26

Page 27: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Workfloor cameras

• Full-time surveillance

• Health and safety

• Protection of company property

• Supervision of the production process (machines only)

• Time-limited surveillance

• Supervision of the production process (employees and machines)

• Supervision of the work of the employee

27

Page 28: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Workfloor cameras

• Principles

• Proportionality

• No intrusion in the employee’s privacy (not absolute)

• Collective and individual information

• Purpose

• Storage of the footage/images

• The number and location of the cameras

• Activity periods of the cameras

28

Page 29: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Workfloor cameras

• Principles

• Good faith processing of the footage/images

• Data protection law applies if personal data is being processed

• Scope of CBA n°68 is larger

• Access and rectification rights continue to apply

29

Page 30: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Workfloor cameras

• Sanctions / Immediate dismissal based evidence obtained through a camera system

• Sanctions need to be included in the Work Regulations

• Two main legal issues

• Reason for immediate dismissal?

• Evidence?

• Admissibility of evidence

• Probative value of evidence

30

Page 31: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Practical application

• Bodycam / dashcam / Google Glass

• Purpose?

• Surveillance

• Newsgathering

• Workfloor surveillance

• Surveillance Cameras

• Use of mobile cameras is restricted

• Prohibition of hidden cameras

31

Page 32: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013

Practical application

• Bodycam / dashcam / Google Glass

• Data protection law applicable?

• Exemption for personal and household activities

• Partial exemption for purposes of journalism

• Personality rights

• Individuals main focus of footage/image?

• Copyright issues

• Copyrighted materials?

• Personal use?

• Commercial re-use?

32

Page 33: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013 33

Contact details

Johan Vandendriessche

Partner

crosslaw CVBA

Mobile Phone +32 486 36 62 34

E-mail [email protected]

Website www.crosslaw.be

Marc Vael

International Vice President

ISACA

Mobile Phone +32 473 99 30 31

E-mail [email protected]

Website www.isaca.org

Page 34: Privacy (and other) issues with dashcams, bodycams and Google Glass (ISACA Privacy Open Forum Brussels)

Brussels, 10 December 2013 34

ISACA BELGIUM


Top Related