PD CEN/CLC/TR 17919:2023

Data protection and privacy by design and by default. Technical Report on applicability to the videosurveillance industry. State of the art. | Status: Current

1 Scope This document illustrates, through a review of the state of the art, the applicability of the EN 17529 to the domain of the video-surveillance industries, a security industrial domain which is serving the objectives of its various customers, themselves subject to a delicate balance between privacy and security objectives eventually changing with the political, local and conjunctural situations. Implementing this standard will allow this industry to provide its customers with solutions designed with the necessary options and flexibility to contribute to their privacy protection obligations over the lifetime of the delivered solution. The present document considers at this stage the core video-surveillance solutions consisting in up to:

• • A number of cameras (fixed or PTZ);
• • A Video Management System (VMS) including its storage capability;
• • A display and replay capability: Basic video analytics allowing automatic detection in the video of each camera of simple geometric situations (movement detection, line crossing, etc.), but excluding embedded tools allowing automated distinguishing, direct identification or tracking of individuals;
• • IP interfacing with external (not included) terminals.

This basic set-up may be expanded in future versions. The “off-the-shelf” system and sub-system manufacturers are the core targets of this document; companies doing systems installation may be indirectly addressed, but service providers eventually running the systems are not covered.