METRO BILBAO, S.A.

What happened

The Spanish DPA concluded that the use of a thermal camera to verify if users of a service have a higher temperature than a certain threshold, in the context of the COVID-19 pandemic, does not fall under the scope of the GDPR when there is no further storing, processing or any operation on the data shown by the camera, and the persons are not asked to identify themselves.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 2Material scope2(1)Read →
• Art. 4Definitions4(1) · 4(6)Read →