When the GDPR was introduced, I worked for an organised that rather quite a bit of personal data of people. That was a fun process of figuring out what was covered, what we needed to change etc.
No It is not an initiative, it is rather law, organisations have to comply and the penalties can be heavy.
Incorrect. The GDPR doesnât really make that distinction. It is all about processing data. If you take a picture and store it, that is according the GDPR processing.
BUT AND THIS IS THE IMPORTANT PART FOR OUR DISCUSSION
The GDPR is applicable if (1) You are a âdata controllerâ and (2) if the data controller, or processor, or the data subject (person) is based in the EU. The regulation also applies to organisations based outside the EU if they collect or process personal data of individuals located inside the EU
So the question here is (1) are you a âdata controllerâ. Well, according to the law: a data controller is an organisation that collects information about living people, whether they are in the EU or not.
So, it clear from the law that if you as private person, take photoâs of people in public, GDPR does NOT apply.
However, if you are running a photography business and you make you are making a living with street photography, then GPDR DOES apply.
And responding to the earlier statementsâŚThe GDPR applies when you are âdata controllerâ, regardless if the data was collected before or after the introduction data of GDPR.
Having said this. There are more regulations in place regarding photography in public places, but they vary from EU country to country.
- In various country is not allowed to take picture of military assets even if they are on the public road. (If I recall correctly this applies to Germany)
- In some situation there are additional regulations in place. In Netherlands for example they are about to pass a bill that it is forbidden to share pictures in which victims of accidents are identifiable (on social media for instance)
But, you have to check that from country to country.