Sweden’s data protection authority IMY has ordered Stockholm Public Transport (SL) to pay a financial penalty for shortcomings in the way it deployed body cameras worn by ticket inspectors.
The city’s public transport network operator issued the cameras to prevent threatening situations arising, document incidents which occurred, and ensure the right person was fined for travelling without a valid ticket.
The cameras record images and sounds that are stored for one minute, after which the material is deleted unless the inspector presses the record button. As they are instructed to wear the camera during their entire shift, they can film all travellers who pass them.
“In practice … a large number of travellers risk being monitored with video and audio recording,” said IMY lawyer Jeanette Bladh Gustafson.
The authority – Integritetsskyddsmyndigheten in full – believes the pre-recording time should be reduced to a maximum of 15 seconds and still images, with no sound recording, are sufficient to identify fare dodgers.
IMY also criticises SL for failing to inform passengers about camera surveillance with sound, something they cannot reasonably expect to take place.
The authority fined the company SEK16m ($1.89 M, €1.58 M) for breaching the General Data Protection Regulation (GDPR).