New evaluation under criteria catalogue v201701 pending
Recertification No. 6: 11/2021
Genetec Austria GmbH proved that its IT product “Privacy Protector” facilitates its privacy compliant use. Privacy Protector is a software module for integration in a video management system which provides very effective algorithms for anonymisation of video data. Users of Privacy Protector are controllers in respect of the processing of personal data that results from the use of the video surveillance system in which the Privacy Protector is integrated. They are provided with guidance on how to comply with EU data protection law in a specific section of the user manual as well as in a dedicated privacy leaflet and can be sure to act in compliance with EU data protection law if they follow this guidance.
German Press Release (12.08.2009) on the occasion of the initial certification
Product/Version
Privacy Protector Version 3.2.3.1
Software module for integration in a video management system
View the 2021 Privacy Protector Certificate
Version of Certification Criteria
Cert. No.
EP-P-Z7M256
Validity
03/11/2021 until 30/11/2023
Recertification No. 5: 31/10/2019
Recertification No. 4: 12/10/2017
Recertification No. 3: 01/10/2015
Recertification No. 2: 24/09/2013
Recertification No. 1: 08/09/2011
Initial Certification: 11/08/2009
Public report
Re2021: Privacy Protector Short PublicReport (PDF)
Re2019: Privacy_Protector Short Public Report (PDF)
Re2017: Privacy Protector Short Public Report (PDF)
Re2015: Privacy Protector Short Public Report (PDF)
Re2013: Privacy Protector Short Public Report (PDF)
Re2011: Privacy Protector Short Public Report (PDF)
Initial2009: Privacy Protector Short Public Report (PDF)
Initial2009: Privacy Protector Kurzgutachten (PDF)
Manufacturer/Provider
Genetec Austria GmbH (as of Nov. 2020)
Guglgasse 15
1110 Vienna
Austria
Until Oct. 2020: KiwiSecurity Software GmbH
BEST
The usage of the Privacy Protector supports the principle of proportionality and the usage of the least invasive technology with regard to video surveillance in an effective way by anonymisation of video data and data minimization.
ATTENTION:
The legitimacy of the video surveillance system needs to be evaluated separately on a case by case basis by the operator of the video surveillance system. The circumstances of a certain video surveillance system need to be taken into account to ensure the success of the application and its legitimate use. Therefore installation and configuration have to be carried out by especially trained personnel.
Summary
KiwiSecurity’s Privacy Protector is a software module for integration in a video management system and provides very effective algorithms for anonymisation of video data.
Details
Recertification 11/2021
Since the last recertification in 2019, the following change has been made to the environment of the ToE: KiwiSecurity GmbH became part of the Genetec group of companies and now trades as Genetec Austria GmbH.
The recertification is based on EuroPriSe’s criteria catalog v201701 for IT-products and IT-based services. The legal and technical evaluation demonstrated that the ToE continues to comply with all applicable requirements of this criteria catalog.
Please cf. the short public report for details.
Recertification 10/2019
Since the last recertification in 2017, the following change has been made to the ToE: Privacy Protector has been extended by a feature to save and load background models, in order to allow for a rapid start-up when the scene is already known.
The recertification is based on EuroPriSe’s criteria catalog v201701 for IT-products and IT-based services. The legal and technical evaluation demonstrated that the ToE continues to comply with all applicable requirements of this criteria catalog.
Please cf. the short public report for details.
Recertification 10/2017
Since the last recertification in 2015, no privacy-relevant changes have been made to the ToE. A planned feature to save and load background models has not been implemented yet and thus has not been covered by the current recertification.
The recertification is based on EuroPriSe’s “GDPR ready” criteria catalog for IT-products and IT-based services. The legal and technical evaluation demonstrated that the ToE complies with all applicable requirements of this new criteria catalog.
Apart from this there have been no legal or technical changes that would impact the evaluation results of the Privacy Protector compared to the re-evaluation in 2015.
Note: Privacy Protector has previously been branded as “KiwiVision Privacy Protector”.
Recertification 10/2015
Since the last recertification in 2013, the following new functionalities have been implemented:
- option to enable an outdoor mode to better accommodate outdoor lighting conditions,
- option to enable a perspective grid to better accommodate small and large objects respectively, and
- three new obfuscation methods (Icon, Image, Blur).
These new functionalities still preserve the privacy enhancing features of the Privacy Protector.
Apart from this there have been no legal or technical changes that would impact the evaluation results of the Privacy Protector compared to the re-evaluation in 2013.
Recertification 09/2013
The Privacy Protector now has a new feature to compensate quick light changes in surveillance area by using several different background models. This enables a better quality for the video feed while still preserving the privacy enhancing features of the Privacy Protector.
Apart from this there have been no legal or technical changes that would impact the evaluation results of the Privacy Protector compared to the re-evaluation in 2011.
Recertification 09/2011
Since the certification in 08/2009, Privacy Protector (v1.0) has not been modified.
In 2010, Austria introduced specific legal requirements for a legitimate implementation of video surveillance systems (§ 50a ff. DSG 2000). This is reflected in the current version of the Privacy Protector user manual.
Enhancements of the EuroPriSe Criteria since the initial certification had to be considered: According to the current version of the EuroPriSe Criteria, requirement 1.2.2.2 (privacy statement) is applicable if the manufacturer of an IT product runs a website
and markets the product via the website. Consequently, the evaluation covered a check of the privacy statement that is provided at http://kiwi-security.com/. The evaluation proved that the privacy statement is in line with EU data protection law.
Initial Certification 08/2009
The purpose of the Privacy Protector is to anonymise video data (by obfuscating persons or objects in the video) from surveillance cameras and storage devices in real-time. It also provides the possibility to define fixed obfuscated or non-obfuscated regions. To ensure a smooth functioning of the Privacy Protector, the surveillance system needs to use static surveillance cameras without automatic zoom. In case of moving cameras it is to be noted, that the Privacy Protector will obfuscate the entire scene until the new background has been learned by the software. Potential areas of operation are from highly frequented public spaces (airports, railway stations, etc.) to even working places.
Depending on the area of operation and technical settings chosen for the surveillance system, access for monitoring personnel can be restricted to obfuscated video data. Access to the non-obfuscated video data can be reserved to specially authorised users (supervisors, etc.).
In practice, the Privacy Protector will operate between the video signal of surveillance cameras and the picture displayed on the monitor or the storage device. Furthermore it can be used to obfuscate video data retrieved from a storage device. This results in displaying just obfuscated video data, with the monitored persons not identifiable.
Technical Evaluator
mksult GmbH
Mag. Andreas Krisch
Kirchberggasse 7/5
1070 Vienna
Austria
akrisch@mksult.at
Legal Evaluator (since recertification no. 6)
mksult GmbH
Mag. Andreas Krisch
Kirchberggasse 7/5
1070 Vienna
Austria
akrisch@mksult.at
Legal Evaluator (until recertification no. 5)
Dr. Thomas Strohmaier
Boschstraße 55/21
1190 Vienna
Austria
thomas.strohmaier@chello.at
Formerly Certified Versions
Recertification v3.2.1 in 10/2019
Recertification v3.1.0 in 10/2017
Recertification v3.0.0 in 10/2015
Recertification v2.3.0 in 09/2013
Recertification v1.0 in 09/2011
Initial Certification of v1.0 in 08/2009