EDPB Guidelines on video processing

Guidelines 3/2019 on processing of personal data through video devices

These guidelines provide analysis on applying the GDPR to personal data processing through video devices, covering lawfulness of processing, and disclosure of video footage to third parties. Key areas include the processing of special categories of data, such as biometric data, and the rights of data subjects, including access, erasure, and objection. The document also addresses transparency, information obligations, storage periods, erasure obligations, and technical and organizational measures for video surveillance systems, culminating in a section on data protection impact assessment.