This is a copy of page 82 of the annual report by Ireland’s data protection commission:
Use of CCTV in restrooms
Throughout 2023, the DPC received numerous queries and complaints from individuals about organisations’ use of CCTV in restrooms or areas where a high expectation of privacy exists (see Annual Report 2023).
The DPC engaged with these organisations on a one-to-one basis and also updated its guidance on the use of CCTV by data controllers to include a specific section on “The use of CCTV in areas of an increased expectation of privacy”. QR 2 This was aimed at clarifying the position of the use of CCTV in areas where individuals have a heightened expectation of privacy. In addition, the DPC contacted the relevant industry bodies to inform them of the update with the DPC’s guidelines.
As a consequence of this guidance, in 2024 the DPC noted a considerable reduction in concerns raised by the public about CCTV in restrooms or areas where a high expectation of privacy exists.
The DPC intended to engage with small and medium sized enterprises throughout 2025 on similar issues to deliver clear and practical guidelines to assist these organisations in meeting their compliance responsibilities in a proportionate and balanced manner.
Seems bizarre that it would even end up in the DPA’s hands; as if people don’t have enough sense to instantly see the GDPR problem and correct it as fast as possible.
I suppose it could be due to only ~⅓ of complaints getting action from the Irish DPA.