Spain

Homeowners Association

600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-10-04.

Rank · Sector

#68

of 86 in Real Estate

Rank · Spain

#899

of 1,075

Rank · All fines

#2,787

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-10-04
Controller / Processor: Homeowners Association
Sector: Real Estate
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 600 on a homeowners' association. The controller had installed a video surveillance system that recorded both images and sound. During its investigation, the DPA found that the video surveillance system recorded, among other things, parts of the common area. The DPA considered this to be a violation of the principle of data minimization. In addition, the DPA found that the controller did not sufficiently comply with its information obligations under Art. 13 GDPR regarding the video surveillance.

Open original source Links to the regulator's original publication or another source.