Municipalities are allowed to install security cameras in public places in the name of safety and protection, however before doing so they are obliged to carry out a General Data Protection Regulation (GDPR) impact study, which they must submit to the data protection authority, commissioner Maria Christofidou said on Monday.

Christofidou said surveillance cameras and CCTV systems could be used to prevent vandalism and fires, and reduce environmental risks, as long as this was in line with the GDPR regulation and national legislation.

The cameras, she added, should be a last resort and recording should be restricted to only what’s absolutely necessary.

Furthermore, the authority should set out how long the footage is kept for, the people who have access to it and the security measures taken in each case.

The public must also be informed about the cameras and the processing of personal data.

Christofidou said her office has already received and was evaluating GDPR impact studies submitted by municipal authorities.

She stressed that protecting personal data was not an obstacle to installing CCTV systems, however the process should be in line with the law and take into account the fundamental rights of the people.

On Sunday, Paphos acting mayor Angelos Onisiforou called for the installation of surveillance cameras in parks and other public spaces to be accelerated following repeated incidents of vandalism and damage to municipal property.

In a statement, Onisiforou said protecting public property and improving safety in the city’s public spaces had become a priority.

Where the existing legal framework allows surveillance cameras to be installed, the process should begin immediately, he said.

“The law cannot be used as an excuse for inaction in the face of repeated vandalism,” he said.

He added that the municipality would pursue the issue through the appropriate institutional channels with the aim of protecting public spaces and making residents feel safer.