{"id":37710,"date":"2019-09-08T10:42:55","date_gmt":"2019-09-08T07:42:55","guid":{"rendered":"https:\/\/koumentakislaw.gr\/articles\/optikh-katagrafh-gdpr\/"},"modified":"2019-09-30T12:53:39","modified_gmt":"2019-09-30T09:53:39","slug":"gdpr-video-recording-in-workplace","status":"publish","type":"post","link":"https:\/\/koumentakislaw.gr\/en\/articles\/gdpr-video-recording-in-workplace\/","title":{"rendered":"GDPR: The use of video recording systems in the workplace"},"content":{"rendered":"<h2><strong>GDPR: The use of video recording systems in the workplace (act 4624\/2019)<\/strong><\/h2>\n<h3><strong>1. Preamble <\/strong><\/h3>\n<p>\u201cBig brother is watching you\u201d is the well-known quote reminding us of George Orwell and his novel \u201c1984\u201d. In this novel the Big Brother is a fictional character-leader and symbol. Ingsoc, the governing party in Oceania, forces its power on the residents of the country in his name and on his behalf. G. Orwell describes the society as one where all citizens (all except for Proles) is under constant surveillance from the authorities, via electronic means.<\/p>\n<p>We know all too well that neither Oceania nor, at least in the novel, Big Brother ever existed. But we do identify phenomena of surveillance and abuse of the government (mostly) powers as the Big Brother.<\/p>\n<p>In modern societies the need for video recording systems is present -for the protection of persons and goods. Thus, it would be justifiable if someone was to think \u201cthose who abide by the law have nothing to worry about\u201d, opening a big discussion on personal freedoms and fundamental rights with both sides presenting important arguments.<\/p>\n<p>When it comes to modern-day businesses, the need for the protection of persons and goods is not only present, but also more vivid. And this is because modern-day businesses have to do with \u201cour\u201d persons and \u201cour\u201d goods.<\/p>\n<p>Having particular regard to those concerns, the use of video recording systems has been regulated on a European and national level. The regulations in place regard, among others, the businesses and their employees.<\/p>\n<p>The regulations regarding the (broader) issue of personal data are today found, in a European Union level, in <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679&amp;from=EL\"><span style=\"color: #003366;\"><strong>Regulation (EU) 2016\/679<\/strong>N\/span&gt;<\/span><\/a> and in <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016L0680&amp;from=EN\"><span style=\"color: #003366;\"><strong>Directive (EU) 2016\/680<\/strong><\/span><\/a> of the European Parliament and of the Council of 27 April 2016. Issues arising from this particular legislation have repeatedly concerned us in the past (indicatively in <a href=\"https:\/\/koumentakislaw.gr\/en\/articles\/gdpr-in-the-context-of-employment\/\"><span style=\"color: #003366;\"><strong>work relations<\/strong><\/span><\/a>, the <a href=\"https:\/\/koumentakislaw.gr\/en\/articles\/gdpr-biometric-data\/\"><span style=\"color: #003366;\"><strong>use of biometric data in employment contracts<\/strong><\/span><\/a>, the <a href=\"https:\/\/koumentakislaw.gr\/en\/articles\/gdpr-first-fine-imposed\/\"><span style=\"color: #003366;\"><strong>first fines imposed for the violations of the relevant Regulation<\/strong><\/span><\/a> etc.).<\/p>\n<p>Article 63 paragraph 1 of the aforementioned Directive imposed an obligation to incorporate its provisions in all national legal systems by 6.5.2018.<\/p>\n<p><strong>Spain and Greece turned a blind eye.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<h3><strong>2. Greece taken to court by the European Commission<\/strong><\/h3>\n<p>The European Commission announced, in a <a href=\"https:\/\/europa.eu\/rapid\/press-release_IP-19-4261_en.htm\"><span style=\"color: #003366;\"><strong>press release<\/strong><\/span><\/a> of 25.7.2019, its <strong>decision to take Greece (and Spain) to the Court of Justice of the EU<\/strong>, for failing to transpose the aforementioned EU regulations. Especially regarding Greece, the commission called on the Court of Justice of the EU to impose financial sanctions in the form of a lump sum of \u20ac5.287,50 per day Greece did not comply (from 6.5.2018) and, in case Greece still refrains from complying -after the day of the judgment, a daily penalty payment of \u20ac22.169,70 and a minimum lump sum of \u20ac1.310.000.<\/p>\n<p>Our country had to rush in passing the relevant act (act 4624\/2019) under the urgency procedure. One of the most important issues of personal data (troubling most businesses and employees) is the issue of video recording, via a closed circuit, at the workplace.<\/p>\n<p>&nbsp;<\/p>\n<h3><strong>3. The provisions of the recently passed act 4624\/2019 regarding video recording <\/strong><\/h3>\n<h4><strong>3.1. The content of \u00a7\u00a7 7 &amp; 8 of article 27, act 4624\/2019<\/strong><\/h4>\n<p>The provision of article 27 of this act refers to the processing of personal data for the purpose of performance of employment contracts. Paragraphs (7) and (8) regard issues relating to the (legitimate) processing of personal data in the workplace. To be more precise, they have the following content:<\/p>\n<p><em>\u201c7. The processing of personal data in the workplace via closed circuit video recording systems, either if the workplace is accessible to the public or not, is only allowed if it is necessary for the protection of persons and goods. The data collected via a closed-circuit video recording system cannot be used as a criterion for the valuation of the employees\u2019 efficiency. The employees are informed in written, either by being given a printed document or electronically, for the installation and operation of a closed-circuit video recording system in the workplace.<\/em><\/p>\n<ol start=\"8\">\n<li><em> For the purposes of the present act, all those working with any work relationship, works contract or service contract, public or private, no matter the validity of the contract, those who are up for a position and past employees are perceived as employees\u201d.<\/em><\/li>\n<\/ol>\n<h4><strong>3.2. Conclusions drawn from the provisions regulating video recording.<\/strong><\/h4>\n<p>We can deduct the following conclusions from articles 27 \u00a7\u00a7 7 &amp; 8\u00a0act 4624\/2019:<\/p>\n<p><strong>\u00a0(a)<\/strong> The use of a closed-circuit video recording system in the workplace:<\/p>\n<ol>\n<li><strong>is (exclusively) permitted if it is necessary for the protection of persons and goods<\/strong><\/li>\n<li><strong> is not tolerated (in any way) as a means to evaluate the employees\u2019 efficiency<\/strong> (it must be noted that, notwithstanding the clear prohibition by law, no one can really prevent the employer from monitoring the attitude and efficiency of the employees who are within the range of the existing and lawful video recording system).<\/li>\n<\/ol>\n<p><strong>\u00a0(b) <\/strong>The employees <strong>must be informed<\/strong> either via a printed document or via email for the installation and operation of a closed-circuit video recording system in the workplace.<\/p>\n<p><strong>(c) <\/strong>Employees are considered those who:<\/p>\n<ol>\n<li>relate to the company with an employment contract, full or partial, for a limited or indefinite time<\/li>\n<li>relate to the company with a works contract or a service contract<\/li>\n<\/ol>\n<p><strong>iii.<\/strong> are up for a job (under the wording chosen by the legislator, informing those persons in written will certainly be difficult).<\/p>\n<ol>\n<li>are former employees.<\/li>\n<\/ol>\n<h4><strong>3.3. Worth mentioning: The initial wording of the provision regulating video recordings.<\/strong><\/h4>\n<p>The initial wording of the second and third subparagraph of par. 7 mentioned:<\/p>\n<p><em>\u201cData collected via a closed-circuit video recording system cannot be used as the only criterion for the evaluation of the employees\u2019 behavior and performance. The employees are informed in written, either by being given a printed document or electronically, for the introduction and use of control and monitoring methods.\u201d<\/em><\/p>\n<p>Therefore: Under the wording of the relevant provision it was clear that closed circuit video recording systems could be used as a criterion (one of many -not the only one) for the evaluation of the employees\u2019 behavior and performance.<\/p>\n<p>Needless to say, the original wording did not entail a clarification of who was considered as an employee. The, later added, paragraph 8 not only clarified, but also expanded the term, as it ought to.<\/p>\n<h4><strong>3.4. Explanatory memorandum.<\/strong><\/h4>\n<p>The explanatory memorandum for paragraphs 7 and 8 of article 27 mentioned:<\/p>\n<p><em>\u201cParagraph 7 introduces the provision that monitoring a workplace through recording systems (either if it is accessible by the public or not) is allowed under conditions and for the achievement of specific purposes, and that there is an obligation for informing the employees in written for the introduction and operation of monitoring and surveillance methods in the workplace (see also article 13, paragraph 1 of GDPR).<\/em><\/p>\n<p><em>Closing, to avoid any ambiguity regarding the scope of the provisions, paragraph 8 defined the meaning of the term \u201cemployee\u201d in the context, where the term includes even those who provide their services voluntarily, as well as trainees obtaining professional skills. <\/em><\/p>\n<p>&nbsp;<\/p>\n<h3><strong>4. The (relatively) recent decisions of the DPA in relation to video recording and the directions given<\/strong><\/h3>\n<p>The most recent decisions of the Authority are dating back to 2018 (published according to the previous institutional framework in force, act 2472\/1997): Decision no.40\/2018 which regarded a catering company and the (more famous) no.41\/2018, which regarded a law firm.<\/p>\n<p>These decisions dealt with similar issues (installation of closed-circuit video recording systems in workplaces). In both cases, the controllers were fined (5,000\u20ac in the first case and 50,000\u20ac in the second). The assumptions, in both cases, were identical. To be more precise, they both mentioned (this way providing the necessary directions all businesses should take):<\/p>\n<p><strong>(a) <\/strong><em>\u201c\u2026 Audio and video data, when referring to persons, constitute personal data\u201d.<\/em><\/p>\n<p><strong>(b) <\/strong><em>\u201cStoring and transmitting a person\u2019s image, collected by a video surveillance system operating lawfully, continuously or at regular intervals, in a closed or open space of gathering or passing of persons, constitutes processing of personal data \u2026\u201d<\/em><\/p>\n<p><strong>(c) <\/strong><em>\u201cBasic prerequisite \u2026for the lawful processing of personal data is respecting the principle of proportionality, meaning that the collected data are necessary and appropriate for the intended purpose, which cannot be succeeded by less intrusive means\u201d<\/em><\/p>\n<p><strong>(d) <\/strong><em>Furthermore, the places where the cameras are installed and the way the data is received should be defined is such way, so that the data collected are not more than those necessary to achieve the purpose of processing and no basic rights of the persons in the area surveyed are jeopardized, especially the right of \u201clawful expectation of protection of private life\u201d in a specific place.<\/em><\/p>\n<p><strong>(e) <\/strong><em>\u201cAdditionally \u2026the system should not be used for surveying employees in the workplace, except in special situations where this is justified by the nature and the conditions of the work and it is necessary for the protection of health and the security of the employees or the protection of critical workspaces (e.g. military factories, banks, high risk facilities). <\/em><em>For example, in a typical workspace, video surveillance should be limited in areas of entrance and exit, without surveying certain office areas or corridors. An exception to that can be certain areas like cashiers\u2019 desks or areas with vaults, electromechanical equipment etc., under the condition that the cameras focus on the good they are protecting and not on the areas the employees occupy. Also, in some specific areas, like areas with electromechanical equipment, the shift supervisor or the security supervisor can monitor in real time the operators of high-risk machinery, in order to be able to intervene immediately, in case a safety incident occurs\u201d. <\/em><\/p>\n<p>&nbsp;<\/p>\n<h3><strong>5. In Conclusion<\/strong><\/h3>\n<p>There was no \u201cBig Brother\u201d in George Orwell\u2019s \u201c1984\u201d, but there was electronic surveillance in his name, powerful and very widespread.<\/p>\n<p>Technology and legislation, in a European and in a national level, permit the creation of similar conditions as they allow the monitoring and video recording in workplaces (as well). <strong>\u201cFor the protection of persons and goods\u201d-exclusively.<\/strong><\/p>\n<p>The existing legislation (act 4624\/2019, article 27, par. 7) <strong>protects the businesses and, even more so, the employees.<\/strong> <strong>The same does the Data Protection Authority, with its above-mentioned decisions.<\/strong><\/p>\n<p>The legal and administrative sanctions, in cases of infringement of the relevant obligations, are not negligible.<\/p>\n<p>To avoid the provided, cumbersome, sanctions, it appears that the businesses\u2019 complete alignment with the existing legislation and the directions given by the DAP is necessary.<\/p>\n<p>Today.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-34861 size-thumbnail alignnone\" src=\"http:\/\/koumentakislaw.gr\/wp-content\/uploads\/2016\/04\/Koumentakis-and-Associates-Stavros-Koumentakis-Home-572-600-150x150.jpg\" alt=\"stavros-koumentakis\" width=\"150\" height=\"150\" srcset=\"https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2016\/04\/Koumentakis-and-Associates-Stavros-Koumentakis-Home-572-600-150x150.jpg 150w, https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2016\/04\/Koumentakis-and-Associates-Stavros-Koumentakis-Home-572-600-80x80.jpg 80w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/p>\n<h4><a href=\"https:\/\/koumentakislaw.gr\/en\/the-team\/stavros-koumentakis\/\">Stavros Koumentakis<\/a><br \/>\n<em>Senior Partner<\/em><\/h4>\n<p>P.S. A brief version of this article has been published in MAKEDONIA Newspaper (September 8th, 2019).<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-37715 aligncenter\" src=\"https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02-300x169.jpg\" alt=\"\" width=\"300\" height=\"169\" srcset=\"https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02-300x169.jpg 300w, https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02-768x432.jpg 768w, https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02.jpg 1919w, https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02-600x338.jpg 600w, https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02-870x490.jpg 870w, https:\/\/koumentakislaw.gr\/wp-content\/uploads\/2019\/09\/Stavros-Koumentakis-Article-efhmerida-MAKEDONIA-GDPR-Systhmata-Optikhs-katagrafhs-02-420x236.jpg 420w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>GDPR: The use of video recording systems in the workplace (act 4624\/2019) 1. Preamble \u201cBig brother is watching you\u201d is the well-known quote reminding us of George Orwell and his novel \u201c1984\u201d. In this novel the Big Brother is a fictional character-leader and symbol. Ingsoc, the governing party in Oceania, forces its power on the&#8230;<\/p>\n","protected":false},"author":3,"featured_media":37874,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[206],"tags":[214],"class_list":["post-37710","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","tag-gdpr-en"],"_links":{"self":[{"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/posts\/37710","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/comments?post=37710"}],"version-history":[{"count":5,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/posts\/37710\/revisions"}],"predecessor-version":[{"id":37876,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/posts\/37710\/revisions\/37876"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/media\/37874"}],"wp:attachment":[{"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/media?parent=37710"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/categories?post=37710"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/koumentakislaw.gr\/en\/wp-json\/wp\/v2\/tags?post=37710"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}