Well doesn’t Relying Parties using the BankID API for signatures and authentication have private keys to start the flows for users scanning QR codes etc?
Could you, having the right private keys, impersonate some company soliciting a BankID signature?
I’m not sure what you can do with that though. You cannot steal some other ongoing signature I guess.
You can start a signing process saying you are who ever owned that certificate. E.g. if you call someone. You can not use those signatures to gain access, and it is rather in phishing.
Only for stationary cameras. Filming/photographing with a non-stationary camera is allowed as long as it is not in a sensitive situation (in their home, in the toilet/changing room/etc).
So I can mount my security camera on a WallE-like chassis to randomly drive around my property and I am no longer under the same strict regulation? What exactly made you come to that conclusion when IMY considers things like dashcams to be under the regulations of privacy and GDPR?