17
DraftS05-CON-010v0.1Source imported
Section 91 of 102
90. Surveillance Boundaries and Sensitive Data
Stable section ID: S05-CON-010-SECTION-91 · 24 content blocks
System05 shall define strict boundaries for audio, video, biometric, behavioral, location, and occupancy-related monitoring.
Sensitive monitoring shall not be introduced merely because it could improve convenience or model performance.
Surveillance-related functions shall consider:
- Necessity.
- Proportionality.
- Consent.
- Physical location.
- Expected privacy.
- Data retention.
- Human access.
- Automated interpretation.
- Risk of misuse.
- Vulnerable occupants.
- Legal restrictions.
- Private spaces shall receive stronger protection than public or shared operational zones.
Where possible, the system should use privacy-preserving alternatives such as:
- Local processing.
- Anonymous occupancy counts.
- Non-imaging sensors.
- Short retention periods.
- Event-only recording.
- Aggregated information.
- User-controlled activation.
The agent shall not infer sensitive personal characteristics unless explicitly authorized, necessary, lawful, and supported by an appropriate governance process.