Company
Insufficient legal basis for data processing
Ngày ra quyết định
29 tháng 11, 2022
Thẩm quyền
Spanish Data Protection Authority (aepd)
ES
Ngành
Industry and Commerce
Quốc gia
HU
Luật
GDPRTrạng thái
FINALMô tả
The Spanish DPA has imposed a fine of EUR 3,000 on a company. The controller had installed a video surveillance system that also recorded the voices of both employees and customers. During its investigation, the DPA found that the controller did not have a valid legal basis for processing the information of the voices as part of the video surveillance. In addition, the DPA found that the controller failed to provide sufficient information about the video surveillance, including information about the processing, the identity of the controller, and the exercise of data subjects' rights.