Date of Decision: 13 November 2024

07/SIU/2018

This inquiry is one of a number of own-volition inquiries into a broad range of issues pertaining to surveillance technologies deployed by State authorities. The inquiry sought to assess whether Sligo County Council was processing personal data in compliance with the GDPR and the Data Protection Act 2018. The inquiry examined a number of the Council’s processing operations including its use of CCTV cameras in public places used for the purposes of prosecuting crime or other purposes.

The findings made in the decision include:

• Findings that Sligo County Council lacked a valid legal basis for processing of personal data from CCTV and Automated Number Plate Recognition (ANPR) cameras.
• Findings that Sligo County Council failed to erect appropriately worded and located signage in respect of the processing of personal data collected via CCTV cameras.
• The other findings in the decision include infringements relating to Sligo County Council’s obligations to carry out data protection impact assessments, to maintain data logs for specific accesses to CCTV recordings, and to implement appropriate technical and organisational measures.

Corrective measures exercised:

• A temporary ban on the processing of personal data through CCTV cameras and ANPR cameras at a number of locations until a valid legal basis can be identified.
• An order to Sligo County Council to bring its processing of personal data into compliance taking certain actions specified in the decision.
• A reprimand in respect of Sligo County Council’s infringement of section 79 of the Data Protection Act 2018.
• An administrative fine of €29,500

For more information, you can download the full decision at this link: Inquiry into Sligo County Council November 2024 - (PDF, 7.6MB)