Article 3.35 Surveillance and Data Use

(a) (1) Surveillance within the ICT shall be conducted strictly for legitimate safety and operational purposes, and only in ways that uphold the fundamental rights to privacy and freedom from arbitrary monitoring.

(b) (2) Surveillance tools (e.g., CCTV, facial recognition, drones) may be used only for defined safety purposes and shall comply with ICT privacy principles.

(c) (3) Surveillance data shall be retained only as long as necessary and be accessible solely for compliance or legal review purposes.