On February 8, 2024, the Office for Personal Data Protection (UOOU) announced that it adopted a methodology for the design and operation of camera systems in relation to the processing and protection of personal data. In particular, the UOOU published the methodology to guide administrators and processors of personal data, including suppliers of camera systems, in their obligations with the General Data Protection Regulation (GDPR) and EDPB Instructions No. 3/2019, but it noted that the document is not legally binding.

What is the scope of the methodology?

The UOOU noted the following aspects of the methodology document, including that:

• it applies to both recording and online camera systems involved in personal data processing;
• it proposes a classification of camera systems into four classes;
• it suggests minimum technical and organizational measures; and
• it provides an example of a possible processing of a balance test.

Furthermore, the UOOU noted that the methodology can be used in whole or in part, and it can be supplemented by procedures issued by relevant ministries. In addition, the UOOU highlighted that the methodology does not deal with camera surveillance, which is necessary for the fulfillment of a task carried out in the public interest or in the exercise of public authority.

You can read the press release here and the methodology here, both only available in Czech.