> The issue is he set it up without complying with GDPR rules. If you set up a CCTV system that can record public areas or land you don't own, the data collected needs to be reasonable and you need to notify people you're doing it so they can request to have images of them deleted. Any organisation running CCTV in a public area will likely have performed a DPIA, including police, local government etc.

On the GDPR front, I'm pretty sure Ring doorbell cameras store the videos in their cloud service. I would expect any GDPR implications to be primarily, if not solely, the responsibility of Ring/Amazon as they're the provider storing the data. Doesn't seem reasonable to make this the responsibility of every Ring doorbell camera user.

To be honest, I'm surprised Amazon isn't doing more here to defend this business owner.