Spain

Homeowners' association

600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-06-26.

Rank · Sector

#233

of 351 in Individuals and Private Associations

Rank · Spain

#927

of 1,075

Rank · All fines

#2,815

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-06-26
Controller / Processor: Homeowners' association
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine on a Homeowners' association. The association had installed video surveillance cameras which, among other things, also covered the public space. The DPA considered this to be a violation of the principle of data minimization. The DPA also found a breach of the controller's obligation to provide information on data processing under Art. 13 GDPR. The original fine of EUR 1000 was reduced to EUR 600 due to the voluntary payment and the acknowledgement of responsibility.

Open original source Links to the regulator's original publication or another source.