DSGVO-Bußgelder für Body-Camera-Datenverarbeitung
Definition
The December 18, 2025 CJEU judgment establishes binding interpretation that body camera footage falls under GDPR Article 13 (information to be provided where data are collected from data subject). German authorities established unified fine procedures in June 2025. Swedish precedent: 16 million kronor (~€1.5 million) fine for body camera operator for GDPR violations, with 4 million kronor specifically allocated for inadequate information provision. German supervisory authorities have signaled enhanced enforcement of data protection by design and default, particularly for systems capturing facial biometric data.
Key Findings
- Financial Impact: Hard floor: €5,000–€20,000,000. Swedish precedent: €1.5 million for insufficient disclosure. GDPR Article 58 permits €20 million or 4% global annual turnover (whichever is higher) for information obligation violations. German federal police and 9 state police forces (Baden-Württemberg, Bavaria, Lower Saxony, Hamburg, Hesse, North Rhine-Westphalia, Rhineland-Palatinate, Saxony, Thuringia) now subject to enforcement.
- Frequency: Single enforcement action per non-compliant system or agency = €1.5M–€20M+ per violation. Thuringia's 1,200+ camera deployment alone represents massive exposure surface.
- Root Cause: December 18, 2025 CJEU judgment retroactively classified body camera data collection as 'direct' under GDPR Article 13. German authorities (as of June 2025) centralized enforcement mechanisms. Existing deployments in 9 German states lack documented Article 13 disclosure protocols.
Why This Matters
This pain point represents a significant opportunity for B2B solutions targeting Law Enforcement.
Affected Stakeholders
Chief Information Security Officer (CISO) / Datenschutzbeauftragter, Chief Financial Officer (CFO) / Finanzamtsleiter, Police IT Director / Polizeipräsident, State Interior Ministry Legal Counsel
Action Plan
Run AI-powered research on this problem. Each action generates a detailed report with sources.
Methodology & Sources
Data collected via OSINT from regulatory filings, industry audits, and verified case studies.