The French Supreme Administrative Court confirmed that the usage of a video surveillance system capable of real-time suspicious behavior detection violated Article 21 GDPR and could not be based on an exemption in national law.