DPE-2026-0024

Herkenning van elke passant

Een herkenningssysteem legt iedereen vast die het ziet, terwijl het doel alleen over de gezochten gaat.

Familie
Bewaring
Status
actief
Geldt voor
installation, vehicle, iot

Wat er gebeurt

A camera or sensor reads a characteristic that identifies a person or a vehicle, compares it against a list, and stores a record of the reading whether or not it matched. The stored record includes the identifying value, the time and the location. The purpose stated for the system concerns only the matches, but the storage covers every passage.

Waarom het ertoe doet

Someone who is on no list, suspected of nothing and asked for nothing acquires a location history held by a party they have no relationship with. Combined over several sites, the non-matches alone reconstruct movements. The person cannot know a record exists, and in most deployments there is nothing at the location that says so.

Veelvoorkomende oorzaken

  • everything logged for later evidential use, rather than the comparison result alone
  • a retention period set once for the whole system instead of separately for matches and non-matches
  • readings kept to demonstrate that the system works, in the form of the readings themselves

Dit is het níet

Comparing against a list and discarding non-matches immediately is not this entry, however extensive the comparison. Nor is a camera that records images without recognising anything. The distinguishing feature is that identifying values of non-matches are retained.

Hoe je het vaststelt

Indicator

Records of readings that produced no match exist after the comparison, established from the system's configuration, its export, its retention schedule, or from an access request that returns your own passage while you are on no list.

Methode

document-comparison

Kwaliteit van de detectie

78 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • Non-matching readings are discarded within the comparison, with nothing retained beyond a count.met de hand te toetsende bevinding vervalt
  • What is retained is not linkable to a person or a vehicle, such as a count or a coarse category.met de hand te toetsende bevinding vervalt
  • A statute expressly provides for retaining non-matching readings for a stated period.met de hand te toetsende bevinding krijgt een ander patroonThe retention is then provided for, which changes the question to whether the practice stays inside it.
  • The retention observed is shorter than the configured maximum.met de hand te toetsende bevinding wordt zwakker

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above

Juridisch kader

Bepalingen

eu-gdpr-5-1-ceu-gdpr-5-1-eeu-gdpr-13nl-sv-126jj

Veelgehoorde tegenwerpingen

The readings are deleted automatically.

After how long, and established how. A period longer than the comparison itself means the non-matches were stored, which is the finding.

Nobody looks at the non-matches.

Retention is processing whether or not anyone looks. The question of who may look afterwards is separate and, over years, unknowable in advance.

There is a sign at the entrance.

Check what it says. A notice that a camera is present is not information that an identifying characteristic is read, compared and stored, and it rarely names the controller or the retention.

Geldt wanneer

to-processing

Verwante patronen

← alle patronen