GDPR as it relates to ANPR is a complex issue and the ICO Commisioner on surveillance cameras is working on industry standards. As I say I do not intend to assist him by becoming a test case
One thing is certain though implied consent is no longer enough it has to be explicit - hence all those annoying emails from firms you have not dealt with since the turn of the century!
One thing is certain though implied consent is no longer enough it has to be explicit - hence all those annoying emails from firms you have not dealt with since the turn of the century!
https://ico.org.uk/for-organisation...ul-basis-for-processing/legitimate-interests/
- There are three elements to the legitimate interests basis. It helps to think of this as a three-part test. You need to:
- identify a legitimate interest;
- show that the processing is necessary to achieve it; and
- balance it against the individual’s interests, rights and freedoms.
- The legitimate interests can be your own interests or the interests of third parties. They can include commercial interests, individual interests or broader societal benefits.