Dashcams have become a common feature on vehicles, with drivers eager to document their innocence when it comes to accidents or legal matters. Some insurers even offer drivers discounts for installing such devices in their cars.
However, Ireland’s DPC (DataProtection Commission) has warned that dash cams might be more hassle than they’re worth. It issued guidance last week stating that the footage collected by dashcams is considered personal data under the GDPR (General Data Protection Regulation), because the devices identify and record vehicle registration numbers and people’s faces.
Could you be fined for using a dashcam?
You only need to be concerned about this if you use a dashcam in a business context. This generally means any job in which you are paid to drive.
Any other use of a dashcam is considered “personal or household activities”, which are exempt from the GDPR. This is the same reason that things such as your address book and phone contact lists aren’t considered personal data.
Professional drivers should only use a dashcams if their organisation has mandated its use. That’s because there are several steps that organisations must to take to process the information lawfully. If you don’t do this, you are in violation of the GDPR and could be fined.
Meeting your compliance requirements
The first thing organisations must do if they plan to collect dashcam footage is to identify a lawful basis for collecting the information. This will most likely be legal obligation or legitimate interests.
They must also create a policy stating why they need the information and how it will be used.
Additionally, organisations are required to conduct a DPIA (data protection impact assessment) to identify any data privacy issues that might arise from collecting dashcam footage.
Lastly, organisationsmust make sure the vehicle the dashcam is in and the premises where the footage is stored are both kept secure. They must also make sure there is a secure method for transferring the footage from one location to the other.
Worried about how else the GDPR affects you?
If you want to know about other ways the GDPR affects your organisation, you should consider enrolling on our GDPR Foundation Training Course.
This one-day course provides a comprehensive introduction to the GDPR, helping you to get to grips with the Regulation.