The Bavarian Data Protection Authority has issued a brief paper on video surveillance under the General Data Protection Regulation (GDPR), as part of its regular non-binding information on the GDPR. The Authority emphasised that the detailed German law on video surveillance will cease to apply once the GDPR becomes applicable in May 2018. Under the GDPR, companies using video surveillance will first have to conduct a privacy impact assessment. In more complicated cases, a prior consultation with the competent data protection authority will also be necessary. The Authority recommends that businesses document the purpose of their video surveillance system, the reasons why it is necessary and proportionate, and the risks which arise for data subjects along with the respective counter-measures.
Video Surveillance Paper (in German)