Workshop
Non-compliance with general data processing principles
Datum rozhodnutí
29. března 2022
Úřad
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
HU
Sektor
Industry and Commerce
Země
HU
Právo
GDPRStav
FINALPopis
The Hungarian DPA has imposed a fine of EUR 1,300 on a workshop. The workshop had installed a video surveillance system to protect the company's assets. However, the cameras also captured parts of the employee's work area. The DPA found that the recording of the employees was not necessary to ensure the purposes associated with the video surveillance and was therefore disproportionate. The DPA also found that the workshop had not sufficiently complied with its information obligations under Art. 13 GDPR. The workshop referred to the consent given by the employees as the legal basis for the video surveillance. However, the DPA concluded that the workshop could not base the video surveillance on consent, as voluntary consent in the employee-employer relationship is questionable. Instead, the workshop should have based the video surveillance on a legitimate interest.