CIPP/E Study Guide
Ch 15.1–15.2 - Surveillance overview

Introduction and surveillance technology

Surveillance means observing an individual or group, and it is getting cheaper, more capable and more pervasive. The classic concern is the nation state watching citizens, but attention has shifted to surveillance capitalism - companies profiting from behavioural data. The book groups surveillance data into four key types: communications, video, biometric and location. The core regulatory aim is that where surveillance invades privacy, the invasion must be necessary, lawful, fair and proportionate.

The technology we use to make life easier generates a wealth of data about us and about the people we interact with. Each call, text, email or web visit produces detailed information about the type, time, duration, destination and content of the communication. CCTV records our actions, biometric data is used for identification, payment cards log purchases, mobiles track our movements and fitness monitors capture health data.

The four key types of surveillance data (technical perspective)
TypeExamples of what it captures
CommunicationsType, time, duration, destination and content of calls, texts, emails and web activity
Video surveillanceCCTV images of people or things (faces, number plates)
BiometricIdentification, authentication and verification using bodily characteristics
LocationMovements via mobile location data, CCTV or geolocation (GPS)
The balancing problem

The aim of privacy and data protection law is to regulate, limit and condition surveillance so that any invasion of privacy is necessary, lawful, fair and proportionate. Achieving the right balance - especially against national security - is hard.

  • Surveillance was traditionally a problem between individuals and nation states
  • Focus has shifted towards surveillance capitalism and commercial use of data
  • During COVID-19, governments adopted intrusive activities (contact tracing, vaccination passports) with little opposition
  • The volume and granularity of data, plus the ease of collection, open significant scope for abuse

Key terms - quick answers

What is “Surveillance”?
The observation of an individual or group of individuals; may be covert or open, in real time or via stored material.
What is “Surveillance capitalism”?
The idea of companies profiting from the use of behavioural data about individuals.
What is “Behavioural data”?
Data about how a person acts, generated by their use of technology and devices, which companies can capture and analyse.
What is “Internet of Things (IoT)”?
The networked interconnection of everyday objects, which generates further data about individuals.