Editing CE - N° 441065

From GDPRhub

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 66: Line 66:
 
}}
 
}}
  
The body temperature captured by cameras without any legal bases is manifestly unlawful and can trigger the urgency interim procedure under Art. L 521-2 of the French code of Administrative Justice. The interim relief judge is entitled to enjoin the administrative authority which allowed the processing to remove the cameras and to suspend the effect of the administrative decision authorising the processing of these sensitive data.
+
The cameras capturing body temperature were set in front of schools without a lawful basis under Article 9 GDPR and could trigger the urgency interim procedure under Art. L 521-2 of the French code of Administrative Justice. The interim relief judge is entitled to enjoin the administrative authority which allowed the processing to remove the cameras and to suspend the effect of the administrative decision authorising the processing of these sensitive data.
  
== English Summary ==
+
==English Summary==
  
=== Facts ===
+
===Facts===
The NGO « Ligue des droits de l’Homme » brought an action for interim measures under L 521-2 of the code of Administrative justice (“CAJ”), before the administrative judge of first instance of Versailles to remove fixe and portable thermal cameras installed in Lisses’ municipal offices and used in the entrance of schools to monitor the body temperature of agents and citizens. The NGO also required to suspend the execution of the decision allowing the installation of both kinds (fixed and portable cameras).  
+
The NGO « Ligue des droits de l’Homme » brought an action for interim measures under L 521-2 of the code of Administrative justice (“CAJ”), before the administrative judge of first instance of Versailles to remove fixed and mobile thermal cameras installed in Lisses’ municipal offices and used at the entrance of schools to monitor the body temperature of agents and citizens. The NGO also required to suspend the execution of the decision allowing the installation of both kinds (fixed and mobile cameras).
After confirming that the GDPR applied, the judge of first instance issued an order rejecting the request. Thus, the NGO appealed the order before the Council of State (Conseil d’Etat) and requested mainly to annul the order, grant its request at first instance and enjoin the city of Lisses to adopt any appropriate measure to indicate that the processing of body temperature remains optional, under Art. L 521-2 CAJ.
 
By virtue of Art. 521-2 CAJ, the interim relief judge may order any measures necessary to safeguard a fundame
 
  
=== Dispute ===
+
After confirming that the GDPR applied, the judge of first instance issued an order rejecting the request. Thus, the NGO appealed the order before the Council of State (Conseil d’Etat) and requested mainly to annul the order, grant its request at first instance and enjoin the city of Lisses to adopt any appropriate measure to indicate that the processing of body temperature remains optional, under Art. L 521-2 CAJ.
The supreme Court had to assess whether the right to the protection of personal data included in the right to privacy, constitute a fundamental freedom within the meaning of L 521-1 CAJ. Thus, if the judge could enjoin the city of Lisses to suspend the execution of its decision and remove the thermal cameras.  
+
 
 +
By virtue of Art. 521-2 CAJ, the interim relief judge may order any measures necessary to safeguard a fundamental freedom.
 +
 
 +
===Dispute===
 +
The supreme Court had to assess whether the right to the protection of personal data included in the right to privacy, constitute a fundamental freedom within the meaning of L 521-2 CAJ. Thus, if the judge could enjoin the city of Lisses to suspend the execution of its decision and remove the thermal cameras.
 +
 
 +
===Holding===
 +
Although the mobile thermal cameras do not record personal data, the judge clarified that the decision based on the information captured by the thermal cameras must be regarded as a processing, within the meaning of Art. 4 GDPR. Indeed, the City had already asked to the teachers and pupils to leave the school depending on the highness of the body temperatures captured.
 +
 
 +
Furthermore, the judge held that the body temperature was accurate enough to identify individuals and must be regarded as a sensitive personal data under Articles 4 and 9 GDPR.
 +
 
 +
Regarding the lawfulness, the judge rejected all the legal bases claimed by the City and held that the processing was manifestly unlawful. Indeed, no provision has been taken regarding the thermal cameras installed by the City (Article 9(2)(g) GDPR), no provision on the necessity of the processing with regard to a health policy has been implemented (Article 9(2)(g) GDPR), and the City did not demonstrate that the consent has been collected prior to the data processing (Article 9(1)(a) and Articles 7 and 8 GDPR).  
  
=== Holding ===
 
Although the portable thermal cameras do not record personal data, the judge clarified that the decision based on the information captured by the thermal cameras must be regarded as a processing, within the meaning of Art. 4 GDPR. Indeed, the city report to the teachers and pupils the need to leave the school depending on the highness of the body temperatures captured.
 
Furthermore, the judge held that the body temperature was accurate enough to identify individuals and must be regarded as a sensitive personal data under the GDPR.
 
Regarding the lawfulness, the judge rejected all the legal bases claimed by the city and hold that the processing was manifestly unlawful. Indeed, no provision has be taken regarding the thermal cameras installed by a city (Article 9(2)(g) GDPR), no provision on the necessity of the processing with regard to a health policy (Article 9(2)(g) GDPR), and the city did not demonstrate that the consent has been collected prior the processing (Article 9(1)(a) and Articles 7 and 8 GDPR).
 
 
The Court added that the processing of sensitive personal data regardless the prior performance of a data protection impact assessment – under Article 35 GDPR - was sufficient to be regarded as unlawful.  
 
The Court added that the processing of sensitive personal data regardless the prior performance of a data protection impact assessment – under Article 35 GDPR - was sufficient to be regarded as unlawful.  
  
As a consequence, the right to the protection of personal data has been manifestly infringed and the NGO rightly asked for the suspension of the execution of the measure and the removal of the portable thermal cameras.  
+
As a consequence, the right to the protection of personal data has been manifestly infringed and the NGO rightly asked for the suspension of the execution of the measure and the removal of the mobile thermal cameras.  
  
  
== Comment ==
+
==Comment==
 
''Share your comments here!''
 
''Share your comments here!''
  
== Further Resources ==
+
==Further Resources==
 
''Share blogs or news articles here!''
 
''Share blogs or news articles here!''
  
== English Machine Translation of the Decision ==
+
==English Machine Translation of the Decision==
 
The decision below is a machine translation of the French original. Please refer to the French original for more details.
 
The decision below is a machine translation of the French original. Please refer to the French original for more details.
  

Please note that all contributions to GDPRhub are considered to be released under the Creative Commons Attribution-NonCommercial-ShareAlike (see GDPRhub:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To edit this page, please answer the question that appears below (more info):

Cancel Editing help (opens in new window)

Template used on this page: