Austria

Operator of a public toilet

25,000 €

GDPR enforcement action by Austrian Data Protection Authority (dsb) on 2022-08-23.

Rank · Sector

#22

of 218 in Not assigned

Rank · Austria

#14

of 38

Rank · All fines

#953

of 3,042

Case details

Authority: Austrian Data Protection Authority (dsb)
Date: 2022-08-23
Controller / Processor: Operator of a public toilet
Sector: Not assigned
Quoted Articles: Art. 5 (1) a), b), c) GDPR, Art. 6 (1) f) GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Austrian DPA has imposed a fine of EUR 25,000 on an operator of a public toilet. The controller had installed a video surveillance camera on the restrooms and secretly recorded people using the toilets. The DPA found that the controller had no legal basis for installing the cameras. In assessing the fine, the fact that the privacy of the data subjects had been significantly violated was taken into account as an aggravating factor.

Open original source Links to the regulator's original publication or another source.