The Deputy will appreciate that I am not in a position as Minister to interpret the law or to provide advice on a particular case in response to a Parliamentary Question. In general, the type of situation mentioned by the Deputy may be contrary both to criminal and to civil law. As regards criminal law, Section 10 of the Non Fatal Offences Against the Person Act 1997 creates an offence of harassment where a person, by any means, intentionally or recklessly, seriously interferes with another person’s peace or privacy, including by persistently watching, pestering, or besetting him or her. The Act provides that a person guilty of the offence shall be liable on summary conviction to a fine of up to €2,500 or to imprisonment for a term not exceeding 12 months or to both. If a person is convicted on indictment, they may be fined and-or imprisoned for up to seven years.
As regards civil law, taking images of a tenant without their consent or knowledge in a part of the rented property where they have a reasonable expectation of privacy may be contrary to the terms of their tenancy agreement, including those implied under statute. It may also infringe both common law and constitutional rights to privacy. Furthermore, the Data Protection Acts 1988 and 2003 generally apply to personal images recorded by means of video cameras unless the recording activity relates to an individual's own personal, family or recreational activities i.e. the ‘household’ exemption.
Since the activity referred to does not appear to fall within the ‘household’ exemption, the recording of such personal data appears to come within the scope of data protection law. This means that the person responsible for such recording is a ‘data controller’ for the purposes of the Acts, and that any individual who is filmed may invoke the remedies provided under the Acts, including a right to establish the existence of personal data, a right of access to the data and a right to its erasure. Enforcement of data protection law in this jurisdiction is a matter for the Office of the Data Protection Commissioner. The statutory functions of the Office include the investigation of alleged infringements of the Acts.