What documents are required for a housing community to install CCTV surveillance?

ANSWER

If the data controller (housing community) decides to install CCTV surveillance, the first essential step is to implement a surveillance policy that establishes the basic rules for its use, i.e. the purpose for which it is deployed, who will have access, how long the recordings will be stored, etc. The next issue is the appropriate marking of the area covered by the surveillance and the placement of an information notice (GDPR clause) for the persons it will affect. Additionally, if the community is managed by an external entity (management company), that entity constitutes a data processor acting on behalf of the controller and it is necessary to conclude a data processing agreement with them that also covers the surveillance recordings. Furthermore, the persons who on behalf of the community will have access to/view the recordings should be appropriately authorised.

Technical aspects should also be addressed, i.e. appropriate security measures for both the IT equipment and the premises where it is stored, in order to minimise the risk of a personal data breach. I encourage you to read the article on CCTV surveillance.