Dashcams have become increasingly popular among Irish motorists, offering peace of mind and valuable evidence in the event of a road traffic incident. However, many drivers may be unaware that using a dashcam can trigger significant data protection obligations under the General Data Protection Regulation (GDPR).
The Household Exemption: More Limited Than You Might Think
Under Article 2(2)(c) of the GDPR, personal data processing by a natural person in the course of a purely personal or household activity is exempt from the regulation. At first glance, this might seem to cover personal dashcam use. However, the landmark Court of Justice of the European Union ruling in František Ryneš (2014) significantly narrows this exemption.
In Ryneš, the Court held that a home CCTV system which captured public spaces—including a footpath—could not be considered a purely personal or household activity. The same reasoning applies to dashcams, which continuously record public roads, pedestrians, and other vehicles. This means most dashcam users will fall within the scope of GDPR and may be considered data controllers.
Importantly, the logic in Ryneš extends beyond dashcams to other personal devices that capture public spaces: video doorbells and smart home cameras pointing onto the street, helmet cams, bicycle cams, and drones. In each case, once recording extends beyond the private sphere, controller obligations arise and the lawful basis will usually be legitimate interests for security or incident evidence. Persistent or wide-angle capture, audio recording, long retention, and online publication all increase risk and are harder to reconcile with data minimisation and fairness principles.
Commercial Use: No Exemption Available
The Data Protection Commission (DPC) has published guidance making clear that where a dashcam is used in a commercial context—such as by professional drivers, taxis, buses, or delivery companies—the personal exemption will not apply. In these circumstances, operators must consider their full obligations under data protection law, including transparency, data retention limits, security requirements, and individuals' rights to access their data.
Key Obligations for Dashcam Users
For those whose dashcam use falls within GDPR, the DPC guidance highlights several important obligations:
- Transparency: Where video or audio of individuals is recorded, whether inside a vehicle or facing outwards, data protection implications arise. The DPC advises that dashcam users in commercial contexts or recording public areas should display a visible sign or sticker indicating that recording is taking place.
- Lawful Basis: For any use of recordings involving personal data that does not fall within an exemption, controllers must ensure they have a legal basis for processing. Legitimate interests for security or incident evidence can be a viable basis, provided the device is configured and used in a necessity- and minimisation-focused way.
- Data Minimisation and Retention: Personal data collected must be relevant and limited to what is necessary for the stated purpose, and retained only for as long as needed. Many dashcams feature built-in loop functions that automatically overwrite older footage, which can assist with compliance.
The Risks of Sharing Footage Online
Uploading dashcam footage to social media or online forums creates particular difficulties. Once footage is shared publicly, it clearly goes beyond private use and triggers full GDPR obligations. Even where the intention is simply to highlight bad driving or antisocial behaviour, sharing identifiable footage online typically lacks a strong lawful basis and will often breach purpose limitation and fairness principles.
The safest and most legally compliant approach is to avoid social media "naming and shaming" and instead provide footage directly to An Garda Síochána, as sharing data for the investigation of a crime is protected under the Data Protection Act 2018. Publication may also be justified in certain circumstances for journalistic purposes, but this must be carefully balanced against the data protection rights of individuals captured in the footage.
Practical Guidance for Drivers
If you use a dashcam primarily for personal protection in the event of accidents, the key is to keep your use confined to that purpose. Minimise what you capture, restrict retention periods, secure the footage, and share it only with insurers, solicitors, or law enforcement when genuinely necessary. Anonymising or blurring individuals before any wider sharing is advisable, though this can be time-consuming and costly.
As dashcams and smart surveillance devices become ever more commonplace, understanding the fine line between personal security and our obligations to respect the privacy of others has never been more important.
For more information, please contact Gergana Moran or your usual Beauchamps contact.
