I suspect that many entrepreneurs monitor employee activities or, for example, areas where clients visit, and so on.
Please note that simply having a sign indicating monitoring is insufficient. Additionally, it is necessary to:
- define/state the purpose of monitoring (e.g., employee and property security),
- inform employees about the monitoring. The information obligation under Article 13 of GDPR must be fulfilled, meaning you should specify the company name, address, data retention period, and other necessary details,
- provide informational signage indicating who is conducting the monitoring, the purpose, and the duration.
To clarify – monitoring refers to video recording.
Recording with sound is allowed only if a specific provision in the law permits it; otherwise, you could face legal consequences, including criminal liability. In practice, I always recommend creating a monitoring policy that includes all the required information. It’s best if this policy is prepared by a lawyer.
Just in case, check if your monitoring is being conducted correctly. I’ve mentioned before that GDPR violation penalties can be quite substantial in the event of an inspection.
Just in case, check if your monitoring is being conducted correctly. I’ve mentioned before that GDPR violation penalties can be quite substantial in the event of an inspection.