Public Announcement on the Use of Security Cameras in Workplaces

In its public announcement titled “Public Announcement on Matters to Be Considered in the Use of Security Camera Systems in Workplaces” published on 8 June 2026 (“Public Announcement”), the Personal Data Protection Authority (“Authority”) stated that there is a need to inform the public and relevant sectors in order to prevent the unlawful processing of personal data through workplace security camera systems and to clarify the minimum standards that must be observed.

The Public Announcement emphasizes the importance of the principles of data minimization and proportionality, noting that the location of cameras, their field of view, the scope of recording, and retention periods must be limited to the specific purpose pursued. The Authority further underlines that camera systems should be installed for specific and legitimate purposes, such as workplace security and occupational health and safety, whereas abstract justifications such as employee performance monitoring or disciplinary supervision cannot, on their own, constitute a sufficient legal basis.

The Authority expressly states that camera systems should not be used in areas where employees have a heightened expectation of privacy, such as restrooms, changing rooms, prayer rooms, and rest areas. It further notes that camera systems capable of recording audio constitute a more intrusive interference with individuals’ private lives and, therefore, require a separate and particularly careful assessment before use. The Public Announcement also reminds data controllers of their obligations to comply with the duty to inform data subjects, restrict access to camera recordings, implement the necessary technical and administrative measures, and ensure that recordings are retained only for the period strictly necessary for the relevant purpose.

The Authority has emphasized that administrative fines may be imposed pursuant to Article 18 of the Law on employer data controllers who act in violation of these criteria and fail to implement the necessary technical and administrative measures.

You may access the Public Announcement here.