Private individual
Non-compliance with general data processing principles
Dato for beslutning
27. april 2022
Myndighed
Spanish Data Protection Authority (aepd)
ES
Sektor
Individuals and Private Associations
Land
ES
Lovgivning
GDPRStatus
FINALBeskrivelse
The Spanish DPA (AEPD) has imposed a fine of EUR 1,500 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the public space. The DPA considered this to be a violation of the principle of data minimization. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform. The fine is made up of EUR 1,000 for a violation of Art. 5 (1) c) GDPR and EUR 500 for a violation of Art. 13 GDPR.