Certified Information Privacy Professional – Europe (CIPP/E) — Question 260

A homeowner has installed a motion-detecting surveillance system that films his front door and entryway. The camera does not film any public areas, only areas that are the property of the homeowner. The system has been declared to the authorities per the homeowner's country law, and a placard indicating the area is being video monitored is visible when entering the property.

Why can the homeowner NOT depend on the household exemption with regards to the processing of the video images recorded by the surveillance camera system?

Answer options

• A. The surveillance camera system can potentially capture biometric information of the homeowner's family, which would be considered a processing of special categories of personal data.
• B. The homeowner has not specified which security measures are in place as part of the surveillance camera system.
• C. The GDPR specifically excludes surveillance camera images from the household exemption.
• D. The surveillance camera system can potentially film individuals who enter its filming perimeter.

Correct answer: D

Explanation

The correct answer is D because the household exemption does not apply when the surveillance system records individuals who are not part of the household, which includes visitors or passersby. Options A and C are incorrect as they misinterpret the scope of the household exemption and its relation to biometric data. Option B is also incorrect since specifying security measures does not negate the potential invasion of privacy for non-residents recorded by the cameras.