Private individual
€1,000
Insufficient legal basis for data processing
Decision Date
August 6, 2024
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has fined a private individual EUR 1,000. The controller had uploaded images from their video surveillance camera to Instagram showing, amongst others, a minor and members of the national armed forces. During its investigation, the DPA found that the controller had no valid legal basis for uploading these images.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing