Use of CCTV & biometrics [2010] IEDPC 10 (2010)

Use of CCTV & biometrics [2010] IEDPC 10 (2010)

Company X's initial lack of data protection policies and improper access to CCTV constituted non-compliance with the Data Protection Acts; remedial actions including policy creation, restricted access, and opt-out provisions for biometrics were required to achieve compliance.

Citation
[2010] IEDPC 10
Parties
Respondent: Company X; Complainants: Employees of Company X; Decision Maker: Irish Data Protection Commission
Jurisdiction
Ireland
Procedural Posture
Data Protection Investigation / Final Determination
Outcome
Company X required to implement comprehensive data protection policies, restrict CCTV access, provide opt-out for biometric system, and inform staff of rights.
Legal Topics
CCTV Monitoring, Biometric Data, Employee Privacy, Data Controller Obligations
Data Protection Employment Law CCTV Monitoring Biometric Data Employee Privacy Data Controller Obligations

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 3 Authorities cited 2 Party arguments 2
Sign in to unlock

Parties

Company X

Respondent

Employees of Company X

Complainants

Irish Data Protection Commission

Decision Maker

Procedural Posture

Data Protection Investigation / Final Determination

Legal Issues

  1. 1 Whether Company X's use of CCTV and biometric systems complied with the Data Protection Acts
  2. 2 Whether employees' privacy rights were infringed by monitoring and biometric attendance systems

Ratio Decidendi

Company X's initial lack of data protection policies and improper access to CCTV constituted non-compliance with the Data Protection Acts; remedial actions including policy creation, restricted access, and opt-out provisions for biometrics were required to achieve compliance.

Court Disposition

Company X required to implement comprehensive data protection policies, restrict CCTV access, provide opt-out for biometric system, and inform staff of rights.

Orders

  • Company X must restrict CCTV access to designated staff with on-site access only.
  • Company X must implement a comprehensive data protection policy covering CCTV and biometrics.