If one requests bodycam footage of a police encounter involving another person, would they be notified of the request? If party A calls the police on party B and they attend, then party B is entitled to request the bodycam footage of the encounter under the GDPR. If party B performs such a request, and party A appears in the footage, would party A be notified of party B's request?
Law enforcement activities are out of scope of the GDPR, though there is a similar right to access in section 45 of the Data Protection Act 2018. Access to police bodycam footage can be denied or restricted on various grounds, including to protect the rights and freedoms of others. A separate right to access information held by public authorities is part of the Freedom of Information Act 2000, but it exempts the applicant's own personal data and refers to the DPA 2018 for further restrictions of this right – FOIA is just a fallback in case access is not regulated otherwise. If necessary to protect the rights and freedoms of party A, the footage released to B could be redacted in order to protect A. However, since A and B were both present the footage would not disclose information that B didn't already have. Therefore, redaction might not be appropriate. Given that there is no clear legal guidance and that all of this is context-dependent, I'd expect this to come down to the internal policies of the police department handling the access request. I see no grounds that would require A to be alerted when footage is released to B. A could also make a request to access their data, and should receive information about “the recipients or categories of recipients to whom the personal data has been disclosed”, but this might be limited to protect B.
You are missing something. The fact that you have a tick box and its state is saved in the database is enough. The burden of proof is only "on a balance of probabilities", so someone arguing that they didn't consent would have to demonstrate that you falsified the database entry somehow. In terms of GDPR requirements in general you don't need a greater level of proof than this, the key thing is that you have a robust system in place to obtain proof (such as not allowing data into the database without a tick in the box).
In general in the US, anyone may photograph anyone else if they are all in a public place, although in some states such a photo may not be used commercially without permission, which must often be paid for and may be refused. It is unusual for police to photograph people on the street, but they might want to document who was present at a particular place and time. They can do so, but I am not at all sure that they can prevent a person from covering his or her face, or turning his or her back, or charge a person who does so with obstruction. I don't think so. Under some circumstances in the US police may ask a person for identification, and may charge a person who refuses to provide it. This varied from one state to another, and usually depends on the specific circumstances. (If a person is driving an automobile, police may demand to see a driver's license, for example.) Unless a police officer puts a person under arrest, the officer has no general right to control that person's actions, beyond instructing the person not to interfere with ongoing police work. I do not think an obstruction charge would hold up for covering one's face or turning away in the absence of an arrest.
Because you are on their premises and they get to decide what people can or can't do while on their property. This has nothing to do with if recording is legal or not, it has to do with basic property rights and trespass. Let's assume that recording is perfectly legal: so is eating ice cream. However, if its my shop, I can require that you do not make recordings just as I can require that you do not eat ice cream. If I make this requirement known you have three options: you can comply, you can leave or you can stay and do the thing I have prohibited. The first two are legal, the last one isn't; its trespass which is both a tort for which I can sue you and a crime for which you can be arrested and prosecuted.
The key issue here is the unauthorized collection of video thumbnails, not the use of cloud services. Under GDPR, every personal data processing activity has one or more controllers who are responsible for the activity, and every such activity needs a “legal basis”. With such cameras, the operator will typically be a controller, since they determine the purposes for which this camera is used. In this scenario, the operators – as part of their responsibility to conduct the data processing activity in a GDPR-compliant manner – had disabled any cloud features provided by the camera manufacturer. Despite this configuration, the camera manufacturer collected thumbnails and uploaded them to servers under their control. So, we likely have two distinct issues at hand: the camera manufacturer misled its customers about the privacy settings of the cameras. This is not necessarily a GDPR issue by itself. the manufacturer performed data processing activities in contravention of various aspects of the GDPR. Relevant aspects of the GDPR that might have been violated: the manufacturer did not have an Art 6 GDPR legal basis for this processing activity, such as a “legitimate interest” the manufacturer did not provide information per Art 13 GDPR to the people being monitored this way even if the cloud-based thumbnail processing were intended, this could be a violation against the Art 25 obligation to ensure “data protection by design and by default” depending on how the cloud storage services were configured, there might be violations against the Art 28 responsibility to contractually bind such vendors as data processors, or against the Chapter V rules on international data transfers Different actors might have different remedies against this violations: buyers of the camera might have remedies under consumer protection and product liability laws against the manufacturer data subjects of the illegal processing activity have remedies under the GDPR they can exercise their data subject rights against the data controllers, such as erasure of the thumbnails. However, this will be difficult to exercise in practice since the manufacturer will not have identifying information, and would then be free from having to fulfil certain data subject requests per Art 11 GDPR. they can lodge a complaint with a responsible supervisory authority, which would be the data protection agency in their EU/EEA member state (or the ICO in the UK). The EDPS is irrelevant here, since it is only the internal supervision authority for EU institutions. The competent supervisory authorities can levy fines. they can sue the data controllers, both for compliance (e.g. deleting unauthorized thumbnails) and for damages, if any were suffered. However, immaterial damages awarded for GDPR violations are typically fairly low, if they are recognized by the court at all. the right to judicial remedy (sue the controllers in court) and to lodge a complaint are independent. They largely pursue different remedies. Both can be used to seek compliance, but only supervisory authorities can impose fines, and only direct lawsuits by the data subjects can seek damages.
Since your consent is not required in Texas, revocation is irrelevant. Restrictions of use of recordings flow from the legal nature of the recording itself, so there is no provision saying, for example, that only one party needs to consent for just recording, but all parties must consent to make any use of the recording. Since these laws were devised to regulate the practice of wearing a wire and collecting evidence of crimes, requiring consent from all parties would be counterproductive to the purposes of the law. You could try drafting a contract where you pay people to not record you (anybody who doesn't sign, you shouldn't talk to them), but enforcement could be tricky, so I would not try a DIY contract: get a lawyer. You would have to show that you were harmed by them making an unconsented recording. It should be in the form of a contract where you give something of value in exchange for something of value, which is a thing typically enforced by the courts. Also bear in mind that even in an all-party state, if you know that you are being recorded, you cannot just say &quot;I do not consent&quot;, you have to stop talking. Continuing to talk when notified that there is or may be a recording constitutes implied consent, which is why on the phone companies often announce via recording that the conversation may be monitored, and they do not ask &quot;Do you consent&quot;. By not hanging up, you consented.
Recording other people without consent is a crime (§ 201 StGB). But so is threatening other people with violence (§ 241 StGB). Secret recordings and other acts can still be legitimate if they are necessary and appropriate to deflect harm (§ 34 StGB), similar to how hurting someone can be legitimate if you're acting in self-defense. If you're prosecuted for this, it will be up to the court to determine if your act was necessary and proportionate. But regardless of what you did, your recording can be used as evidence against the ex-roommate. German criminal law does not generally exclude illegally acquired evidence. The main risk of disclosing this recording is that you are also providing evidence against yourself for possible wiretapping charges (which may or may not be punishable as discussed above).
england-and-wales Initially, one should comply with the officer's instructions as he has the power under statutory Stop &amp; Search powers to detain someone for the purpose of the search (discussed here). Failure to do so may be an offence. If, subsequently, one considers the search and detention was unlawful, the first port of call is to lodge a complaint with the relevant police force who - depending on the circumstances - may escalate the complaint to the Independent Office for Police Conduct IOPC. You can complain directly to the police/other organisation (see ‘Who can I complain about?’ below for a list of the other organisations) or via the IOPC. If you complain via the IOPC, your complaint will be sent direct to the organisation involved. They will assess your complaint and contact you about how it will be handled. The IOPC will not be involved with this initial assessment of your complaint. If the complaint is found to be valid, then any offence committed by not complying with the office would (in all probability) be overturned on appeal. As well as any compensation awarded by the court, the Chief Constable may consider making an ex gratia payment (mentioned here). Note that there is no obligation to do anything if the interaction falls within the Stop &amp; Account provisions.