The CNIL just published their guidelines regarding mobile applications measuring frequency and presence in public spaces. Here the summary of the most relevant points:
- legitimate interest as a legal basis possible
- the right of information: for systems with a short-term anonymization process the public notice can be short
- the right of objection to the collection and processing of personal data must be guaranteed – the technical solution must enable the execution of this right easily
- it must be possible to delete the data already collected and also prevent a new data collection about the person in the vicinity of the device for the future
Please consult the full publication for further information (available only in French): https://www.cnil.fr/fr/dispositifs-de-mesure-daudience-et-de-frequentation-dans-des-espaces-accessibles-au-public-la-cnil