Events:  

• Christmas markets located:
  - In the Tuileries Gardens (16^th of November 2024 to 1^st of January 2025)
  - Near the Eiffel Tower (7^th of December 2024 to 5^th of January 2025)
• New Year’s Eve
• Basketball matches to be played at the Accor Arena:
  - All Star Game on 29^th of December 2024
  - Paris - Barcelona on 3^rd of January 2025

Concerned train stations:

• Paris Gare du Nord
• Paris Gare de Lyon
• Invalides (RER C)
• Champs de Mars – Tour Eiffel (RER C)
• Musée d’Orsay (RER C)

Design phase:

• From 9^th to 19^th of December 2024
• Under the responsibility of the French Ministry of the Interior 

To enhance security in its train stations, the SNCF Security Directorate is implementing, on an experimental basis, automated real-time analysis of video surveillance images.

Authorized until March 31, 2025 by Law No. 2023-380 of May 19, 2023, relating to the 2024 Olympic and Paralympic Games, and implanted under the supervision of the French Ministry of the Interior, this experimentation, often referred to as video analytics, aims to combine conventional CCTV system with software enabling automatic analysis of the images collected in order to alert the video operators of the SNCF Security Directorate to the four predetermined events below:

• Presence of abandoned objects,
• Crossing or presence of a person in a restricted or sensitive area,
• Crowd movement,
• Excessive density of people.

Once detected, events are systematically analyzed by an authorized video operator before potentially launching any on-ground intervention.

In order to ensure the reliability of the operational use of video analytics, a preliminary design phase is implemented, with presence of agents from the French Ministry of the Interior, to configure the video software. No operational use is made during this phase.

The software used throughout the experiment (configuration phase and operational phase) is based on algorithm models design in advanced. No self-learning algorithms are deployed during this experiment.

For the design phase:

Ministère de l’Intérieur et des Outre-Mer
Direction des entreprises, des partenariats de sécurité et des armes
Place Beauvau
75008 Paris
secretariat-depsa@interieur.gouv.fr

For the operational phase:

SNCF Security Directorate
116 rue de Maubeuge
75010 Paris

As part of its personal data protection policy, SNCF has appointed a Data Protection Officer (DPO): dpo-sncf@sncf.fr

Videosurveillance analysis is implemented, for experimental purposes, to enhance passenger safety in train stations during sports, recreational, or cultural events with potential risks.

These analyses solely aim to detect, in real-time, the following four types of events:

• Presence of abandoned objects,
• Crossing or presence of a person in a restricted or sensitive area,
• Crowd movement,
• Excessive density of people.

Conducted on an experimental purpose, they also aim to assess the technical and operational performance of the software chosen, as well as the evaluation of the social acceptability of this new technology.

Link between video analytics systems and CCT system

As a reminder, according to data protection, the implementation of video analytics systems on images from existing CCTV system is a processing of personal data, in addition to – but not added on – the initial processing of images collection. As explained below, processed data and storage duration can be different according to each processing.

Notifications and guarantees

In accordance with current legal framework, the system does not employ any biometric identification system. Information gathered are not compared with any information from other personal databases.

It simply detects in real time certain predetermined events, to the attention of authorized agents, presenting a serious risk to people's safety.

These triggering events are then broadcasted towards agents responsible for viewing the images and taking necessary measures to address these events.

Thus, algorithmic processing does not yield any other results and cannot, by itself, be the basis for any individual decision or legal action.

Processing images from existing CCTV system

The data processed by the analysis solutions are images from the existing video surveillance system. In compliance with the prefectural authorization for the video surveillance systems, these images are retained for a strictly limited period of 14 days and automatically deleted.

Collection and storage of alert data

Furthermore, the following data is retained for a maximum period of twelve months:

• Detected event
• Date and time of event detection
• Camera reference on which the event was detected
   

The video surveillance images, and the results of automated analyses are only accessible to duly authorized personnel of the French Ministry of the Interior during design phase and of the SNCF's internal security service during operational phase. They may be transmitted to law enforcement authorities upon request.

Data processed is not transmitted to any subcontractor and is not transferred outside France or the European Union.

The “Cityvision” software proposed by the Wintics company and tested during these experiments has been rigorously selected as part of a national public contract conducted bu the French Ministry of the Interior, the award notice for which was published on 8 January 2024 in the Official Jornal of the European Union under OJEU reference: n°2024/S 005-009162.

Its compliance with the requirements, in particular the ethical requirements, laid down by law was certified on the basis of a set of standards drawn up by an independent laboratory. The compliance analysis focused in particular on: guarantees relating to the learning data used to develop the solutions; automatic recording of alerts generated by the software to ensure traceability; human control and system management measures to correct any biases that may appear during operation; the possibility of interrupting the system at any time; and the existence of test phases before it is put into service. The software solutions selected have also been assessed by the French national agency for information systems security with regard to cybersecurity requirements.

Processing is necessary for the performance of a task carried out in the public interest in accordance with Article 6.1.e) of the General Data Protection Regulation (GDPR).

These processing is authorized in accordance with:

• Article 10 of Law No. 2023-380 of May 19, 2023, relating to the 2024 Olympic and Paralympic Games and containing various other provisions,
• Chapter II (Articles 4 to 10) of Decree No. 2023-828 of August 28, 2023, concerning the algorithmic processing of images collected through video surveillance systems and cameras installed on aircraft, enacted under Article 10 of Law No. 2023-380 of May 19, 2023, relating to the 2024 Olympic and Paralympic Games and containing various other provisions.

In accordance with the current legal framework regarding personal data protection, you have the right to access, rectify, erase, and limit your data for as long as the images are kept.

Although alert data is kept for a maximum of 12 months, the data controller can only establish a possible link between you and these alerts as long as it has the images on the basis of which the automated analysis was carried out. However, for the CCTV concerned for this experiment images are kept for a maximum of 14 days. Therefore, after this 14-day period, in the absence of images enabling a possible link to be made with you, it is no longer materially possible to exercise your rights of access, rectification, deletion or limitation, unless you wish to provide the data controller with additional personal data which could possibly enable a link to be made between you and the alert recorded (for example: "I was present in this station, at this time, on such platform, was an alert recorded at that time?").

In accordance with implementing decree No. 2023-828 dated August 28, 2023, the right to object does not apply to the present processing activities, whether during the design phase (article 10 of this decree) or the operational phase (article 17 of this decree).

You can exercise your rights by proving your identity through one of the following means:

• By postal mail:
  Direction de la Sûreté SNCF
  Département Programme Performance Innovation
  116 rue de Maubeuge
  75010 Paris
• By email, at the following address: sf.experimentations-video@sncf.fr 
• Using the following form: Rights exercise form
  Furthermore, if you believe that the processing of your personal data constitutes a violation of regulations, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 ; https://www.cnil.fr/fr/plaintes