Scenario:Ashop ownerdecided to install avideo surveillance systemto protect the property against theft.

UnderArticle 2 of GDPR, the regulation applieswhenever personal data is processed by automated means, includingCCTV footage that captures identifiable individuals.

Option C is correctbecauseGDPR applies when surveillance cameras capture public or third-party areas beyond the shop owner’s premises.

Option A is incorrectbecausecommunity privacy requirements do not override GDPR.

Option B is incorrectbecauseGDPR applies even if the risk is low, as long aspersonal data (images of identifiable individuals) is processed.

Option D is incorrectbecauseGDPR applies to security cameras unless used solely for personal or household purposes(Recital 18).

References:

GDPR Article 2(1)(Material scope includes video surveillance)

Recital 18(Household exemption does not apply to public monitoring)