A recent article on Agenda Digitale explains that installing CCTV systems in stores and shopping centers is lawful only if justified by clear, proportional purposes and implemented with procedures compliant with privacy and labour regulations.

Authored by attorney Andrea Patrizi of QLT Law & Tax, the piece outlines operational obligations: data controllers must respect strict limits on video retention, conduct a Data Protection Impact Assessment (DPIA) in case of large-scale surveillance, and comply with data protection principles. Violations may lead to fines up to €40,000.

Surveillance can be justified for security or asset protection, but must not become a tool for generalised monitoring of customers or employees. Mandatory are visible notices, adherence to the principles of lawfulness, data minimization and proportionality under the EU General Data Protection Regulation (GDPR) – and, when employees are recorded, compliance with labour-law provisions regarding remote monitoring.

Read the full article on Agenda Digitale.