CAVEAT: GDPR is a complex subject with many legal and financial ramifications. ProVision provides this article as general guidance, but it should not be considered legal or professional advice in any way. We further recommend that you consult with professionals in the area of GDPR to ensure that you are fully compliant by the deadline of May 25th, 2018.
So that’s the scary stuff highlighted, and you should take it seriously, but the reality is that these new regulations have a far bigger impact on ecommerce and online businesses that collect very sensitive personal data rather than fleet operators.
This article therefore covers a number of areas that should be reviewed in preparation for the deadline, but in real terms your requirements will not be as onerous or complex as these online businesses.
Before we look at that, let’s define what GDPR has been created to protect.
GDPR, in simple terms, is concerned with:
GDPR is essentially an overriding regulation that sits above local country data protection regulations, but introduce some additional requirements.
The key here is the definition of ‘personal data’, which according to the new GDPR directives means
So that’s obviously things like names, email addresses, addresses, telephone numbers, IP addresses, credit card details, etc., but where this becomes more relevant to you as a fleet operator that uses vehicle cameras, is specifically to things like, captured video of faces and number plates, and even GPS data where a specific person can be identified because of the location and time information.
Vehicle cameras are not specifically covered by CCTV regulations, and so the public do not have the same protections as they would for fixed recording systems. However, as a company you still need to be sensitive to this, especially where you intend to make use of this footage for any external needs.
It’s with this data in mind that the below checklist has been researched and written up for your reading pleasure:
Further, if you are capturing audio and video in your vehicles, where your staff can be recorded, you must make sure they are aware. This can be achieved by including clauses in their employment contracts, creating a data privacy and usage policy for the company. These documents must cover the 9 points highlighted above that impact on them.
Further, and most importantly, you must have stickers/signage on the vehicles that inform the public that the vehicle has cameras installed that record video, audio or both. Our research also highlights that you should include information about how the public can make data access requests of you if they desire. For instance, they feel that they have been recorded and wish you to erase any personally identifiable footage. How can they make this request?
Where rectification or erasure is requested and is deemed a valid request, then you will have up to 60 more days to action the request.
For vehicle camera and tracking data, this can mean that you have to blur out faces and registration plates in order to anonymise data or delete data where no legal basis can be proven for either its original collection or subsequent ongoing retention.
By the way, you cannot charge individuals for dealing with these requests (one of the key changes to current data protection regulations). However you can charge a ‘reasonable fee’ when a request is clearly unfounded or excessive, particularly if it is repetitive.
As a fleet operator, you should not expect to receive many of these requests, but you should prepare nonetheless.
They will be the point person for planning, implementation and handling data access requests.
A final point is that all of this becomes infinitely easier with a cloud-connected system that allows you to access and download footage and data remotely. Just imagine having to deal with all this in a fleet of vehicles where the data is spread across all your vehicles on hard disks and SD cards! A system design for commercial use is built to make compliance with GDPR easier, not harder.
If you would like to discuss any aspects of this article or your vehicle camera needs, be sure to contact us as we’ll be delighted to answer your questions and provide our expert advice on the various system options.