AI-based swimming pool surveillance raises data protection concerns in Germany

What happened

AI-based surveillance systems have been deployed in multiple public swimming pools in Baden-Württemberg to monitor overcrowding and detect distressed swimmers. The Freudenstädter Panorama-Bad has used the system since summer 2023, registering the number of people in pools and alerting staff to unusual movement patterns or motionless swimmers.

Reported impact

The state data protection officer warned that swimming pools and local authorities are underestimating privacy risks associated with the systems. Cameras capture video frames of swimmers that are transmitted to servers for real-time AI analysis of movement patterns, raising concerns about whether facilities camera are recording people without their knowledge.

Index analysis

The data protection officer noted that video recordings capturing recognizable movement patterns constitute personal data under data protection law. He stated that existing regulations from the state data protection law are comparatively rigid and lack modern legal frameworks for AI processing of personal image data.

Governance controls

The data protection officer's office advised pool operators to question their software providers and fulfill their legal responsibilities. The officer called on legislators to establish modern legal frameworks for processing personal image data through AI, as none currently exists.

Classification

Organizations

Freudenstädter Panorama-Bad (deployer), Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (regulator), Arbeitsgemeinschaft öffentliche Bäder Baden-Württemberg (mentioned)

Category

Privacy and surveillance

Industry

Travel, leisure and hospitality

Country

Germany

Harm status

Potential harm

Intent

Unintentional

Timing

Post-deployment

Harm types

Human or fundamental rights

Harmed

Consumers, General public

AI systems

AI-based pool surveillance system

Regulations

GDPR (cited)

Sources and evidence