CASE STUDIES 2013 - Data Protection Commissioner - Ireland [2013] IEDPC 13 (2013)

A data controller is obliged to provide a data subject with a copy of their personal data from CCTV footage upon a valid access request, subject to redaction or consent regarding third-party images; general claims of prejudice or inability to provide footage are not valid grounds for refusal.

Citation: [2013] IEDPC 13
Parties: Complainant: Data Subject; Respondent: Data Controller
Jurisdiction: Ireland
Procedural Posture: Data Protection Complaint / Investigation and Determination by Data Protection Commissioner
Outcome: complaint upheld in part; data controller complied after intervention
Legal Topics: CCTV Footage Access, Personal Data, Data Subject Rights, Data Controller Obligations

Data Protection Privacy Law CCTV Footage Access Personal Data Data Subject Rights Data Controller Obligations

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 2 Authorities cited 2 Party arguments 2

Parties

Data Subject

Complainant

Data Controller

Respondent

Procedural Posture

Data Protection Complaint / Investigation and Determination by Data Protection Commissioner

Legal Issues

1 Whether a data controller is obliged to provide CCTV footage to a data subject upon access request
2 Whether the presence of third parties in CCTV footage justifies withholding footage
3 Whether ongoing proceedings or indemnity concerns justify refusal of access

Ratio Decidendi

Court Disposition

complaint upheld in part; data controller complied after intervention

Orders

Data controller to provide stills from CCTV footage showing only the data subject's image
No audio required as none existed on the system