Doorkeeper: Intelligent video monitoring with data protection as a primary focus

Background

A primary reason for why Doorkeeper was selected as a participant in the sandbox was that they want to use so-called intelligent video analytics to market more privacy-friendly video monitoring. Intelligent video analytics is technology that automatically analyses content from video monitoring cameras.

To achieve better data protection, Doorkeeper wants to use artificial intelligence and machine learning to censor identifying data in the video feed. This includes faces, bodies, licence plate numbers, text and logos. They also want to configure the solution to refrain from making continuous recordings when no pre-defined events are taking place. There will be some temporary storage taking place in the camera body, but these files will later be automatically deleted and will normally not be made available to the operator.

Intelligent video analytics can be configured in many different ways to customise the monitoring for the defined purpose. In the sandbox, we have limited our discussion to primarily focus on three functions within the solution:

• Censoring of identifying data from the video feed in real time
• Registration and notification of fire and smoke
• Registration and notification of criminal activity

About the project, challenges

The purpose of this sandbox project has been to explore some of the most relevant regulatory challenges that arise in connection with the use of intelligent video analytics.

1. Legal basis for intelligent video analytics

   We have explored legal issues associated with the three different areas of application for Doorkeeper’s solution. These issues are transferable to other enterprises that are developing similar solutions. One key point is that intelligent video analytics, which are designed to make the processing of personal data less invasive, may affect the legality of the processing pursuant to data protection legislation.

2. Alternative solution designs

   Doorkeeper has two alternative designs for the use of intelligent video analytics. The analysis and censoring either takes place inside the camera body, or on an external platform. The choice of design impacts how personal data is processed in the solution. In this project, we have discussed how this may have consequences for how invasive the monitoring is for the individuals recorded in the video feed.

3. Data minimisation

   This project demonstrates that it is possible to implement data minimisation measures in intelligent video analytics. Such measures may be implemented by configuring the solution to limit the amount of personal data collected and processed to what is necessary for the purpose. The presence of functions in monitoring systems that make processing of personal data less invasive will also require enterprises in the security industry to assess, to a greater extent, the types of personal data they need to be processing to achieve the purpose of the monitoring.

4. Disclosure of personal data

   Doorkeeper’s solution is designed to store less personal data that may be disclosed, compared to cameras that make continuous recordings. This could make it easier for enterprises like Doorkeeper to comply with requests for access, as the enterprise will store fewer recordings that may be relevant. The rules for disclosure of personal data, however, will be the same for Doorkeeper as for all other data controllers.

5. Security issues

   We have also discussed how Doorkeeper must ensure to maintain security within the solution. This entails that security must remain up-to-date with technological developments, that any vulnerabilities must be addressed and handled immediately, and that data must be deleted once the purpose has been achieved.

Going forward

In the sandbox, Doorkeeper has explored questions they have had in the development of intelligent video analytics, with potential functionality that enhances data protection. Doorkeeper may use the discussions to better comply with requirements of data protection legislation and ensure better data protection within the solution. The Data Protection Authority also hopes the discussion can be useful for other enterprises developing similar technology.

Through these sandbox activities, the Data Protection Authority has also learned a great deal about the possibilities inherent in intelligent video analytics. We will use this new knowledge to further improve our informational work.