Homeowners Association
Non-compliance with general data processing principles
Datum för beslut
4 oktober 2022
Myndighet
Spanish Data Protection Authority (aepd)
ES
Sektor
Real Estate
Land
RO
Lag
GDPRStatus
FINALBeskrivning
The Spanish DPA has imposed a fine of EUR 600 on a homeowners' association. The controller had installed a video surveillance system that recorded both images and sound. During its investigation, the DPA found that the video surveillance system recorded, among other things, parts of the common area. The DPA considered this to be a violation of the principle of data minimization. In addition, the DPA found that the controller did not sufficiently comply with its information obligations under Art. 13 GDPR regarding the video surveillance.