GDPR, the General Data Protection Regulation, came into effect on 25th May 2018. It helps to ensure that the personal data of EU citizens is handled safety and securely by organisations and businesses. GDPR effects all elements of an organisation that handles or processes personal data, including security systems.
If the organisation currently uses CCTV, access control systems, and other security measures, it is certainly worth evaluating how they are currently collecting, storing, and processing data and whether or not this meets the new GDPR standards.