The Personal Data Protection Agency (AZOP) has initiated oversight proceedings concerning a camera installed near the changing rooms at the New Yorker store in Zagreb’s Arena Centar. The official oversight of the fashion chain’s store followed complaints from female shoppers who suspect the camera may have captured the interior of the changing rooms.

The proceedings were launched after several women complained that a ceiling surveillance camera, located in the lingerie department right next to the changing rooms, is visible from inside the cabin, specifically in the mirror reflection. One of the women provided photographs to the platform showing the camera mounted on the ceiling, stating that she noticed it too late, only after she had already changed into her underwear. AZOP confirmed that its inspectors went to the site as soon as they determined the exact location.

From New Yorker’s German headquarters in Braunschweig, the company stated that its cameras do not infringe on customer privacy. Communications head Nena Müller claimed in a response that the disputed device does not have the capability to record at a 360-degree angle and that the lens is turned away from the cabins. They also stated that access to the footage is exclusively held by their security department, and although they acknowledge that moving the camera is technically feasible, a decision on this has not yet been made. According to one of the women, store employees told her that video surveillance was installed there primarily to prevent theft.

Arena Centar management stated that they take the protection of visitors’ privacy extremely seriously, but emphasised that they do not manage the internal systems of their tenants. Arena Centar highlighted that tenants independently install and control their own video surveillance and are contractually obliged to operate in accordance with data protection laws and regulations. They added that they immediately forwarded the inquiry to New Yorker for verification.

Under the European General Data Protection Regulation (GDPR) and Croatian laws, the installation of cameras in high-privacy areas such as changing rooms and toilets is strictly prohibited. The Criminal Code also provides for a prison sentence of up to one year for unauthorised visual recording in such cases.