Legal · AEPD framework
AEPD framework
Last updated · May 2026
Mindora’s products are built to align with the Spanish Data Protection Agency’s (AEPD) guidance applicable to video surveillance, behavior monitoring, and AI systems processing personal data in retail, public, and sociosanitary contexts.
Reference documents
- AEPD — Guía sobre el uso de videocámaras para seguridad y otras finalidades.
- AEPD — Adecuación al RGPD de tratamientos que incorporan Inteligencia Artificial.
- AEPD — criteria for proportionality, signage, and Article 21 rights of data subjects.
- EU AI Act — Title III obligations for high-risk AI systems.
- LO 4/1997 (videovigilancia por las Fuerzas y Cuerpos de Seguridad) and RD 596/1999 for the public-sector context.
- Esquema Nacional de Seguridad (RD 311/2022) for municipal and administration deployments.
Key alignment points
- Lawful basis — documented per deployment, with balancing tests where Article 6(1)(f) applies.
- Information to data subjects — layered notice using AEPD’s reference signage.
- Right to object (GDPR Article 21) — operational opt-out flows.
- No biometrics, no facial recognition by default. Behavior & scene-only.
- Edge-only processing — raw video does not leave the premises.
- Audit trail — alerts, accesses, and exports logged for accountability (GDPR Article 5(2)).
Engagement
For the current AEPD-aligned briefing pack, write to contact@mindoratechnologies.com.
