COMPLIANCE OF VIDEO SURVEILLANCE SYSTEMS WITH PERSONAL DATA PROTECTION REQUIREMENTS: ANALYSIS OF PROVIDER PRACTICES: COMPLIANCE OF VIDEO SURVEILLANCE SYSTEMS WITH PERSONAL DATA PROTECTION REQUIREMENTS: ANALYSIS OF PROVIDER PRACTICES

Deyan Ivanov; Donika Dimanova

doi:10.46687/jsar.v31i1.504

Authors

Deyan Ivanov Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: deqn.plamenov@abv.bg
Donika Dimanova Department of Communication and Computer Engineering and Security Technologies, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: d.dimanova@shu.bg

DOI:

https://doi.org/10.46687/jsar.v31i1.504

Keywords:

Video surveillance, Personal data, GDPR, Compliance, Exploratory survey, Technical measures, Organizational measures

Abstract

Video surveillance is widely used as a security measure, but its operation is directly associated with the processing of personal data and the need to comply with data protection requirements. This paper analyzes the main criteria for assessing the compliance of video surveillance systems with the General Data Protection Regulation (GDPR) and the applicable national legislation, with particular emphasis on their practical implementation by companies operating in the video surveillance sector. An exploratory survey was conducted among representatives of six companies to examine the existence of internal policies, the technical protection measures applied, the organization of access to video data, staff training, and the main difficulties encountered in meeting personal data protection requirements. The results are interpreted as indicative of the surveyed group and reveal both positive practices and gaps in organizational preparedness and the implementation of compliance measures. On this basis, guidelines are formulated for improving personal data protection in the use of video surveillance systems.

Author Biographies

Deyan Ivanov, Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: deqn.plamenov@abv.bg

Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: deqn.plamenov@abv.bg

Donika Dimanova, Department of Communication and Computer Engineering and Security Technologies, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: d.dimanova@shu.bg

Department of Communication and Computer Engineering and Security Technologies, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: d.dimanova@shu.bg

References

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).

Personal Data Protection Act, amended, State Gazette, No. 69, 31 July 2026.

European Data Protection Board. Guidelines 3/2019 on Processing of Personal Data through Video Devices, Version 2.0, 2020.

Commission for Personal Data Protection. Practical Guide on Video Surveillance, 2021.

Commission for Personal Data Protection. Good Practices from the Supervisory Activities of the Commission for Personal Data Protection.

Varbanova, G. The Significance of Electronic Evidence in the Context of Cybersecurity and National Security. Varna: Nikola Vaptsarov Naval Academy, 2024. ISBN 978-619-93016-0-9.

COMPLIANCE OF VIDEO SURVEILLANCE SYSTEMS WITH PERSONAL DATA PROTECTION REQUIREMENTS: ANALYSIS OF PROVIDER PRACTICES