Certified Information Privacy Professional – Europe (CIPP/E) — Question 257

According to the European Data Protection Board, data subjects should be made aware of any video surveillance in operation. How should a retail shop operator ensure that data subjects receive all information required for such a purpose under EU data protection law?

Answer options

• A. The shop operator should post a copy of the manual of the video surveillance system in the shop and on its social media channels.
• B. The shop operator should provide full notice of the intended video surveillance outside the shop, for example with a sign or a stand-up display.
• C. The shop operator should instruct the data protection officer to hand out a comprehensive notice to data subjects every time they enter the shop.
• D. The shop operator should provide the most important information on a clearly readable warning sign to data subjects before they enter the monitored area, and additional mandatory details by other means.

Correct answer: D

Explanation

The correct answer, D, ensures that data subjects are provided with essential information in a clear and visible manner before they enter a monitored space, fulfilling legal requirements. Options A and C do not adequately inform individuals in a direct and accessible manner, while option B, although relevant, does not provide the comprehensive information required under EU law.