Security companies: processors Personnel training Confidentiality Physical security Considerations Office buildings, warehouses Alarm Access control CCTV Security companies: processors Personnel training Confidentiality Maintenance Legal basis Legitimate interest Legal obligation: 333 / 2003 Security controls Reception (receptionist, access control) Alarm CCTV: perimeter security, common areas, parking places Personal data Employees Visitors Requirements Notification – employees Warning signs - visitors Access register Event register Storage period Disposal / destruction Other aspects Camera placement: visible, on common areas (not inside offices, toilets) Video surveillance should not bring prejudice to rights and freedoms of individuals Camera footage is PD although not associated with identification data, or do not contain person’s image (eg.: license plate number)
GDPR March 2018