Who should read this guide?
Any organisation working in the European Union that captures video containing people (members of the public or staff).
On the 25thMay 2018 the General Data Protection Regulation (GDPR) gave the public better rights around their personal data. The Information Commissioners Office (ICO) enforces this within the United Kingdom and across the EU and considers video of a person to be personal information, so enforceable under GDPR.
Members of the public have the right to this information from any organisation that holds it free of charge. So organisations working within the EU that capture video of the public are liable to Subject Access Requests (SAR) and Right of Erasure requests from the public at any point which present a very unpredictable workload.