Odia Kagan of Fox Rothschild alerts us to an opinion by the Romanian Data Protection Authority:
Privacy notices are required under the European Union’s General Data Protection Regulation even if your data processing is video surveillance/CCTV.
The Romanian Data Protection Authority issued a fine against a company for failing to provide adequate notice of data processing in connection with CCTV video surveillance in violation of Article 12 of the GDPR.
via Privacy Compliance & Data Security. If the translator works correctly, the company in question is UTTIS INDUSTRIES SRL, and the company was fined approximately 2500 euros.