If a Company Is Planning to Use Closed-Circuit Television (CCTV)

If a company is planning to use closed-circuit television (CCTV) on its premises and is concerned with GDPR compliance, it should first do all of the following EXCEPT?

A) Notify the appropriate data protection authority.
B) Perform a data protection impact assessment (DPIA) .
C) Create an information retention policy for those who operate the system.
D) Ensure that safeguards are in place to prevent unauthorized access to the footage.