The Hungarian National Authority for Data Protection and Freedom of Information has recently published an opinion on certain aspects of the data process relating to CCTV operations.
The opinion states that a data subject has the right (i) to request that the data controller keeps the CCTV recording for a prescribed period of time; (ii) to access and request their personal data from the data controller (this obligation can be fulfilled in writing, or by letting the data subject view the recording); and (iii) to be kept up to date regarding the progression of the data process.
The Authority also states that personal data in relation to CCTV recordings relates not only to the images of the data subjects but also their actions which can be seen in the recordings.
In order to protect the privacy of others in the recording, the data controller cannot provide a copy of the recording. However, although not obliged, the data controller may provide a copy of the recording with the personal data of others in the recording removed.