Company
€6,000
Insufficient legal basis for data processing
Decision Date
17 de outubro de 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
HU
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 6,000 on a company. The data controller had installed video surveillance cameras which also recorded sound. However, the DPA found that the controller did not have a sufficient legal basis for the surveillance and the recordings therefore had been obtained unlawfully.
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing