SHARE Foundation and partners challenge Belgrade Safe City surveillance deployment (December 2019)

On 3 December 2019, SHARE Foundation — Belgrade's principal digital rights organisation and the lead actor of the #hiljadekamera campaign — published a joint policy brief alongside Partners for Democratic Change Serbia and the Belgrade Centre for Security Policy, formally challenging the legality of Serbia's mass biometric surveillance deployment under the Huawei-supplied Safe City project. The brief concluded that the Ministry of Interior's Data Protection Impact Assessment for the system failed to meet four requirements of Serbia's Personal Data Protection Law and called for the immediate suspension of further camera installation pending compliance. Serbia's Commissioner for Personal Data Protection independently confirmed the brief's findings, stating that the DPIA "was not conducted in line with the requirements of the Personal Data Protection Law" and lacked the mandatory risk assessment for the rights and freedoms of data subjects. The event is the first multi-organisational civil society accountability action against a state biometric surveillance deployment in the corpus's Southeast European record and the first Serbia/Balkans entry in the corpus's event registry.

Context

The December 2019 action was the culmination of SHARE Foundation's first year of campaign work against the Belgrade Safe City system — a Huawei-supplied deployment that Serbia's Minister of Interior and Police Director had publicly announced in early 2019 as installing one thousand smart cameras with facial and licence plate recognition at eight hundred locations across Belgrade. SHARE Foundation's March 29, 2019 investigation had retrieved and published an analysis of a Huawei promotional case study disclosing Phase 1 specifications: one hundred cameras across sixty-plus locations, with facial recognition, behaviour analysis, automatic licence plate recognition, 4K video, and a one-year data retention period. The publication prompted Huawei to remove the case study from its website — the campaign's first documented transparency win — while freedom of information requests to the Ministry for camera location data were refused as confidential, the Ministry claiming to hold no location analysis, directly contradicting the Minister's public announcement.

By October 2019, the surveillance rollout was shaping participation in the ongoing anti-government "One in 5 Million" protests that had been filling Belgrade's streets since late 2018. Protesters covered surveillance camera lenses with duct tape marked "censored" at rallies, and civil society voices warned that the system's capacity for persistent facial identification could deter citizens from exercising the right to assembly. Serbia's former data protection commissioner publicly stated the system could be used to trail political opponents, "monitor regime critics at any moment, which is completely against the law." In November 2019, SHARE Foundation launched the #hiljadekamera ("Thousands of Cameras") civic initiative — a grassroots crowdmapping and public awareness campaign — as the popular mobilisation complement to the legal and policy work the December brief would formalise.

The policy brief

The three-organisation brief, published 3 December 2019, analysed the Ministry of Interior's DPIA — delivered to the Commissioner in September 2019, two months after Serbia's GDPR-based Personal Data Protection Law entered into force in August 2019 — against the Law's specific requirements. The brief identified four structural deficiencies: the DPIA contained no comprehensive description of the smart video surveillance data processing operations; it lacked the risk assessment for the rights and freedoms of data subjects that the Law required; it omitted adequate data protection measures; and it failed to establish a lawful legal basis for mass biometric processing. The brief called for immediate suspension of further installation and for a public debate before any further deployment proceeded. Partners for Democratic Change Serbia and the Belgrade Centre for Security Policy contributed civil society and security-policy analytical expertise alongside SHARE Foundation's legal and digital rights work.

Commissioner's confirmation

Serbia's Commissioner for Personal Data Protection reviewed the DPIA and independently endorsed the brief's conclusions, publicly confirming that the document "was not conducted in line with the requirements of the Personal Data Protection Law" and lacked the "risk assessment regarding the rights and freedoms of data subjects" the Law mandated. This placed the deployment's legal standing in formal dispute with the body responsible for enforcing Serbia's data protection framework — the strongest available institutional validation of the civil society position at the time.

Significance

The December 2019 joint policy brief is the first multi-organisational civil society challenge to the legality of state biometric surveillance in the corpus's Southeast European coverage. Three registers account for its significance to the movement graph. First, it opens the corpus's event record for Serbia and the Balkans, closing a geographic gap in Central/Eastern Europe — the first time a public civil society action from this region enters the corpus's event index. Second, it is the corpus's first documented instance of civil society deploying a new GDPR-based national data protection framework as an accountability lever against a government's deployed biometric surveillance system; the strategy — using accession-candidate alignment with EU fundamental rights norms to restrain domestic surveillance — has since recurred across the campaign and is a replicable route for other Western Balkan civil society actors in comparable contexts. Third, SHARE Foundation's membership in EDRi functioned as the amplifier that carried the Serbian campaign into European policy networks at the moment when the European Commission was drafting what would become the EU AI Act, directly connecting the Belgrade case to the pan-European biometric surveillance movement the corpus maps through the EDRi-coordinated campaigns at European level.