Privacy vs. security: How to comply with the Camera Surveillance Act & GDPR