Data Protection Commissioner investigates camera found in restaurant women’s toilet
Cyprus’s Data Protection Commissioner is investigating a camera found in a restaurant women’s toilet and will begin inspections of catering establishments in September.
Nicosia, Cyprus. Data Protection Commissioner Maria Christofidou said a camera was found in the women’s toilet of a catering establishment during a personal visit, with the case now under investigation by her Office.
Investigation under way
Speaking on the “Alpha Kalokairi” programme, Christofidou said cameras in such areas are prohibited.
Her Office will examine whether the installation breached data protection legislation and whether there are grounds to impose sanctions. Christofidou declined to comment further on the planned course of the investigation.
Inspections planned from September
The Commissioner announced that on-site inspections at catering establishments will begin in September.
The checks will assess whether cameras are installed, where they are positioned, what they record, their field of view and their operating hours. Christofidou said legal requirements govern camera placement, recording coverage and operating times to protect privacy and personal data.
Rules for surveillance systems
Christofidou said prior approval from her Office is not always required before installing a camera, but operators must meet specific obligations and conditions. A data protection impact assessment may be required where processing presents an increased risk.
She also addressed surveillance cameras installed by municipalities in public spaces, saying the law permits their use for specific purposes, including preventing vandalism, fires and environmental hazards. She said this does not make every installation automatically lawful.
The Personal Data Protection Authority recently stated that municipal CCTV systems in parks and other public spaces may be used for safety and civil protection purposes if they comply with GDPR and national legislation.
The Authority said camera use must be necessary and proportionate, with recording limited to what is strictly required. Municipalities must carry out a Data Protection Impact Assessment and submit it for prior consultation, while assessments already submitted by municipal authorities are under evaluation.
This news item was generated automatically by Cyprus Inform from publicly available materials. Report an error →