In specific cases, sectoral regulations may also apply, such as Law 5\/2014 of 4 April on Private Security.<\/li>\n<\/ul>\n <\/p>\n
In addition, the Spanish Data Protection Agency (AEPD) has issued guidelines and resolutions clarifying certain practical obligations, such as the placement of information signs, restrictions on the spaces subject to recording, or the definition of retention periods for images.<\/p>\n
These rules set out the legal framework for the installation and use of cameras in both public and private spaces, defining the responsibilities and obligations of entities installing these recording systems<\/strong>.<\/p>\nCompliance with data processing requirements<\/h2>\n
According to the legislation, \u201cpersonal data\u201d means any information relating to identified or identifiable natural persons. More specifically, Article 5.1 of the implementing regulation of the former Data Protection Act (approved by Royal Decree 1270\/2007, of 21 December) stated that personal data included \u201cany numerical, alphabetical, graphic, photographic, acoustic, or any other type of information concerning identified or identifiable natural persons<\/strong>.\u201d<\/p>\nTherefore, any recording capturing the image of an identified or identifiable individual constitutes personal data.
\nAs a result, entities wishing to implement recording devices in their establishments will be deemed controllers of such data processing and must comply with several obligations under the applicable regulations, including:<\/p>\n
\n- Complying with the principles of lawfulness, purpose limitation, and proportionality.<\/li>\n
- Providing clear and visible notice of image recording.<\/li>\n
- Adopting appropriate technical and organizational measures.<\/li>\n
- Ensuring confidentiality of any third parties with access to the recorded images.<\/li>\n
- Limiting the retention period of the images.<\/li>\n
- Respecting and facilitating the rights of individuals.<\/li>\n<\/ul>\n
Limitations on the use of security cameras<\/h2>\n
Although the use of cameras may seem appealing to enhance security and control in certain spaces, their installation is not unlimited and is restricted by fundamental rights such as privacy, data protection, and the right to one\u2019s own image<\/strong>.<\/p>\nThe main restrictions apply, for example, in private areas such as bathrooms, changing rooms, or rest areas, where individuals\u2019 right to privacy prevails and recording is strictly prohibited.<\/p>\n
Restrictions also apply to public spaces: private individuals and companies may not record public streets on a general basis; only incidental capture is permitted when strictly necessary for security purposes. Recording of public spaces is, in fact, an exclusive competence of law enforcement authorities.<\/p>\n
In the workplace, cameras may be used for security and labor control purposes, but always respecting employees\u2019 rights and in accordance with the principle of proportionality<\/strong>. The Workers\u2019 Statute provides that \u201cthe employer may adopt any measures it deems most appropriate for monitoring and control in order to verify that the employee complies with his or her work obligations and duties […]\u201d. Therefore, employees\u2019 images may be captured even without their consent, as the processing is grounded in the employment relationship, provided they have been duly informed beforehand.<\/p>\nFinally, in domestic use, private cameras are permitted, but they may not capture images of third-party spaces such as sidewalks, neighbors\u2019 entrances, or adjoining properties.<\/p>\n
Considering the possible restrictions and the obligations to be met when installing a video surveillance system, the most advisable course of action is to seek specialized legal advice to ensure compliance with all regulatory requirements.<\/p>\n