A very valid concern and there needs to be 100% transparency on the fact its designed as an ethical system following GDPR and other privacy and cyber sec regulations and that people who opt out will not appear in any footage.
You do realise any commercial gym in the UK today is already packed with CCTV? As is any public environment in the UK...
-------
GDPR:
"[...] any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
Yes, a video in the gym that contains imagery of your face is generally considered personal data under the GDPR. Your facial image is considered a biometric data and can allow for your identification, making it personal data. Recital 51 of the GDPR clarifies that photographs can be considered personal data, especially if they allow for identification.
If your face gets blurred, does that change anything?
Yes, if your face is effectively blurred in a video, it can change whether the imagery is considered personal data.
- Anonymization: If the blurring is done in such a way that you can no longer be identified, directly or indirectly, by any means reasonably likely to be used, then the data may be considered anonymized. Truly anonymized data falls outside the scope of the GDPR. The blurring must be irreversible to be considered proper anonymization."
--
Have you ever asked your gym what they do with their CCTV footage? If they save a porton of it, how is your PII handled?