Christmas is just around the corner and the first Christmas markets have already opened their doors. Operators and showmen are calling for special security measures this year, including temporary video surveillance of their markets. However, blanket video surveillance at Christmas markets is not permitted without good reason - as the data protection officer of the state of North Rhine-Westphalia points out.
"Pure assumptions are not enough for surveillance"
"Many people's need for security is understandable. However, many visitors also want to stroll around the markets freely and unobserved. Video surveillance should therefore be carefully weighed up. Whether it is permitted depends heavily on whether there are indications of a risk situation," explains Bettina Gayk, State Commissioner for Data Protection in NRW
According to Gayk, police or regulatory authorities are authorized to monitor Christmas markets by video. However, facts must justify the assumption that criminal or administrative offenses are being committed at the markets.
It is true that such gatherings of people always offer opportunities for pickpocketing or even life-threatening terrorist attacks. "However, mere suspicions that something like this could happen are not enough to justify a considerable restriction of fundamental rights for a large number of people through large-scale surveillance," emphasizes the data protection officer.
Risk situation decisive for video surveillance
This is why it is particularly important to assess whether there is a sufficient risk situation. "What is required is either knowledge from previous events that indicates an increased probability that criminal acts will also be committed at the current event," explains Gayk. "Or there is a specific threat situation, for example because an attack has already been announced."
With her comments, the Commissioner is also reacting to the President of the Showmen's Association, Albert Ritter, who recently called for video surveillance and admission controls at Christmas markets. According to Ritter, data protection should not be a protective shield for perpetrators.
Despite all the justified concerns about the security of citizens, Gayk warns that such statements conceal a false view of data protection. "Rather, data protection should ensure that civil liberties are carefully weighed up against security concerns. The risk situation at some attractive Christmas markets in large cities is often very different to that of tranquil daytime events in the countryside. Not everywhere do visitors have to accept being watched while drinking mulled wine or chatting with friends."
Reading tip: EDPB publishes guidelines on legitimate interest
Legal basis for video surveillance at Christmas markets
The processing of personal data (such as video recordings of persons) is only permitted if there is a legal basis. In the case of video surveillance, Art. 6 para. 1 lit. f GDPR is often used, which requires a "legitimate interest".
In Germany, Section 4 BDSG supplements the requirements of the GDPR and specifically regulates video surveillance of publicly accessible areas. According to this, surveillance is permitted if it is necessary in order to
- enforce the house rules,
- to protect legitimate interests such as averting danger or preventing criminal offenses,
- or other weighty reasons exist that do not outweigh the rights of the persons being monitored.
Video surveillance must therefore be justified by a specific risk situation or security-related reasons (e.g. terror warnings, previous incidents of theft or violence).
It must also be checked whether the surveillance is appropriate and whether milder means, such as more security staff on site, would be sufficient. The surveillance must also be clearly and visibly indicated by signs (Art. 13 GDPR).
The recordings may also only be used for the purposes for which they were collected (e.g. to avert danger) and not for any other purpose.
Conclusion: Video surveillance of Christmas markets is permitted if it is justified by a legitimate interest, such as the safety of visitors, and the legal requirements are complied with. Operators and authorities must carefully check whether the surveillance is necessary and proportionate.
Source: Communication from the State Commissioner for Data Protection in North Rhine-Westphalia
English 
German 
Italian 
French