Homeowners Association
Non-compliance with general data processing principles
Päätöspäivä
4. lokakuuta 2022
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Real Estate
Maa
RO
Laki
GDPRTila
FINALKuvaus
The Spanish DPA has imposed a fine of EUR 600 on a homeowners' association. The controller had installed a video surveillance system that recorded both images and sound. During its investigation, the DPA found that the video surveillance system recorded, among other things, parts of the common area. The DPA considered this to be a violation of the principle of data minimization. In addition, the DPA found that the controller did not sufficiently comply with its information obligations under Art. 13 GDPR regarding the video surveillance.