Security-related video and calls

Under French law, SNCF security officers are authorized to wear body cameras on an experimental basis. For more on the law, please see Section L2251-4-1 of the French Transport Code, and Deliberation 2017-289 of 16 November 2017 by the French National Data Protection Commission (CNIL). Use of the cameras is regulated under Decree No. 2016-1862 of 23 December 2016.

SNCF has a designated data protection officer, who may be reached by email at dpo-sncf@sncf.fr

We process data from the cameras for two purposes: (1) to prevent incidents when SNCF security officers need to intervene; and (2) to gather evidence of violations and prosecute perpetrators.

The legal basis for processing the data is fulfilment of a public service mission.

The data is stored for six months, starting from the date it is recorded. It is used solely by the individuals responsible for processing it in the course of their duties, and it can be released only to authorities with the legal right to access it.

We will conduct the body camera experiment from January 2018 to December 2019 on eight sites under four SNCF regional security divisions (Directions de Zone Sûreté, or DZS): Montparnasse and Juvisy (DZS Paris Rive Gauche, 17 bd de Vaugirard, 75015 Paris); Grenoble and Lyon Part-Dieu (DZS Sud-Est, 44 rue de la Villette, 69003 Lyon); Bordeaux and La Rochelle (DZS Sud-Ouest, 1 rue Charles Domercq, 33080 Bordeaux; Lille and Calais (DZS Nord, place de la gare, 59800 Lille).

All data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure, the right to restrict or oppose processing of their data, the right of portability, and the right to issue directives on the handling of their personal data after their death.

Under the provisions of France’s Data Protection Act No. 78-17 of 6 January 1978, all persons have the right to access and rectify their data, and therefore anyone may exercise these rights by providing proof of identity and submitting a request to the appropriate DZS.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the CNIL or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

SNCF’s Security Division uses a system that records and plays back calls made to and from the French national rail security centre (Centre National de Sûreté Ferroviaire, or CNSF). SNCF has a designated data protection officer, who may be reached by email at dpo-sncf@sncf.fr

We process data from the calls for the following purposes: (1) to determine whether CNSF employees are handling calls properly and take corrective action to improve service quality; (2) to determine whether employees of the Public Rail Group are using the CNSF appropriately; and (3) to preserve evidence that may be used in legal proceedings.

The legal basis for processing the data is the data controller’s legitimate interest, i.e. proper delivery and improvement of the services.

The data is stored for one month, starting from the date it is recorded. It is used solely by the individuals responsible for processing it in the course of their duties, and it can be released only to authorities with the legal right to access it.

All data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure, the right to restrict or oppose processing of their data, the right of portability, and the right to issue directives on the handling of their personal data after their death.

You may exercise your rights by providing proof of identity and contacting CNSF at: Direction de la Sûreté, Centre National de Sûreté Ferroviaire, 116 rue de Maubeuge, 75010 Paris.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the CNIL or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

SNCF has a designated data protection officer, who may be reached:

  • via postal mail at: SNCF Mobilités, Direction juridique et de la conformité; Département Données Personnelles, DPO; 9 rue Jean-Philippe Rameau; 93633 La Plaine Saint Denis cedex
  • via e-mail at: dpo-sncf-mobilités@sncf.fr

SNCF Mobilités (located at 9 rue Jean-Philippe Rameau 93633 La Plaine Saint Denis cedex) is now experimenting with use of body cameras by a select group of authorized employees at the following facilities:

Transilien facilities (commuter rail)

  • Transilien Services at Paris Nord station
  • Transilien Services, Lines N and U
  • Transilien stations, Line C
  • Transilien stations, Line J
  • Transilien stations, Lines L and A
  • Transilien stations, Paris Saint-Lazare

TER facilities (regional rail)

  • Normandy Regional Lines
  • TER Rhine Region Passenger Services
  • Occitanie Ouest (South-western France) Passenger Services
  • TER Rail Hub, Lyon
  • TER Centre-Val de Loire
  • Alpine lines division

SNCF Voyages facilities (passenger services)

  • Passenger Services, Paris Nord
  • Passenger Services, Rhône-Alpes
  • OUIGO division
  • Rhine Region Passengers

In processing the data from these cameras, we hope to prevent incidents involving security officers, and when officers are attacked, to identify violations and gather evidence that can be used to prosecute perpetrators.

Cameras do not film continuously: recording begins only when a customer becomes verbally or physically aggressive and employees believe they are in danger.  In each case, employees advise the customer that he or she will be filmed.

The legal basis for processing the data is SNCF Mobilités’s legitimate interest in ensuring the safety of its employees and­—as a transport provider—to ensure the safety of transport users aboard trains and in stations.

SNCF Mobilités will process audio-visual data (sound and images) recorded by the body cameras, as well as metadata for images recorded by SNCF employees.

Audio-visual data will be retained for one month from the date it is recorded, and the metadata will be retained for six months. Access to the data is limited to authorized individuals at SNCF Mobilités, its subcontractor SNCF, and its technical service providers.

All affected data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure and the right to issue directives on the handling of their personal data after their death.

You may exercise your rights by providing proof of identity and contacting CNSF at:

Direction de la sûreté Centre vidéo sûreté IDF
116 rue de Maubeuge
75010 Paris

You also have the right to submit a claim to CNIL, the French data control authority (www.cnil.fr).

Information

For your comfort, safety and security, SNCF’s Security Directorate is trialling some solutions to assist with personnel tracking. We are testing the possibility of locating a volunteer, the owner of abandoned luggage or someone who has just committed a crime or offence in the station and reconstructing their movements. This is done using only non-biometric data, i.e. data that does not relate to physical, biological or behavioural characteristics strictly relating to one person (e.g. clothing worn).

No biometric data will be processed during this trial.

Controller

EPIC SNCF Security Directorate

DPO

SNCF has appointed a data protection officer, contact details: dpo-sncf@sncf.fr

Purpose of the data processing

The trial has three aims:

  • Technical
    To test the algorithms of the Personnel Tracking Assistance without the use of biometric data, identifying and tracking volunteers in railway environments, and based on the use of existing video-protection systems.
  • Security
    To improve the security of persons and property by enabling the Security Directorate’s video operators to locate and track more effectively the owners of abandoned luggage or the perpetrators of a crime or offence just committed.
  • SNCF’s role as a regulated undertaking
    To limit disruption to traffic and so provide an improved response to SNCF’s contractual obligations in terms of quality of service, by enabling the Security Directorate’s video operators to locate and track the owners of abandoned luggage more effectively.

Scope of the project

  • Geographical area of the trial
    The trial as a whole will take place at a maximum of five stations within the Ile de France region and four provincial stations, with the number of cameras restricted to 30 per station.
    The first phase of the trial will take place at the Gare du Nord between 8th July and 9th August, and involve 15 cameras.
  •  Duration of the trial
    The trial is authorised to run until July 2020.

Data collected

The data is collected in the form of thumbnails taken from the video-protection cameras selected for the trial.

This data is retained for a maximum of six hours and is then automatically deleted.

* thumbnail: an image of a person extracted from the system

Contact

To exercise your rights or for further information, please use the following email address:

sf.edii-video@sncf.fr

You can also correspond by post to the following address:

Direction de la Sûreté – EDII (Département Expertise Digitale, Industrielle et Innovation)
116 rue de Maubeuge
75010 Paris

If you consider that the processing of data concerning you is in breach of the regulations, you have the right to submit a claim to the CNIL (Commission Nationale de l'Informatique et des Libertés) 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.