Spain

Company

6,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-10-17.

Rank · Sector

#82

of 218 in Not assigned

Rank · Spain

#477

of 1,075

Rank · All fines

#1,630

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-10-17
Controller / Processor: Company
Sector: Not assigned
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 6,000 on a company. The data controller had installed video surveillance cameras which also recorded sound. However, the DPA found that the controller did not have a sufficient legal basis for the surveillance and the recordings therefore had been obtained unlawfully.

Open original source Links to the regulator's original publication or another source.