Company
€6,000
Insufficient legal basis for data processing
Fecha de la decisión
17 de octubre de 2022
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
País
HU
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine of EUR 6,000 on a company. The data controller had installed video surveillance cameras which also recorded sound. However, the DPA found that the controller did not have a sufficient legal basis for the surveillance and the recordings therefore had been obtained unlawfully.
Citas legales
Art. 6
Problemas e infracciones
Insufficient legal basis for data processing