Workshop

Kirjeldus

The Hungarian DPA has imposed a fine of EUR 1,300 on a workshop. The workshop had installed a video surveillance system to protect the company's assets. However, the cameras also captured parts of the employee's work area. The DPA found that the recording of the employees was not necessary to ensure the purposes associated with the video surveillance and was therefore disproportionate. The DPA also found that the workshop had not sufficiently complied with its information obligations under Art. 13 GDPR. The workshop referred to the consent given by the employees as the legal basis for the video surveillance. However, the DPA concluded that the workshop could not base the video surveillance on consent, as voluntary consent in the employee-employer relationship is questionable. Instead, the workshop should have based the video surveillance on a legitimate interest.