Gas station
€3,000
Insufficient fulfilment of data subjects rights
決定日期
2022年9月22日
權限
Hellenic Data Protection Authority (HDPA)
GR
部門
Industry and Commerce
國家
GR
法律
GDPR狀態
FINAL說明
The Hellenic DPA has imposed a fine of EUR 3,000 on a gas station operator. A person had filed a complaint with the DPA due to the controller's failure to grant them access to images of their minor child recorded by the video surveillance system in the gas station. The DPA considered this to be a violation of Art. 12 GDPR. In addition, the operator had shared the images from the video surveillance system with the police in the course of a police investigation without informing the parent. The DPA found that failure to inform the parent constituted a violation of Art. 14 GDPR.
法律引文
Art. 12Art. 14
問題與違規
Insufficient fulfilment of data subjects rights