Germany

Unknown

—

GDPR enforcement action by Data Protection Authority of Niedersachsen on 2021.

Case details

Authority: Data Protection Authority of Niedersachsen
Date: 2021
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The camera images of a store were distributed without the knowledge and intention of the controller due to a faulty configuration. The distribution involved recordings of employees as well as customers.

Open original source Links to the regulator's original publication or another source.