Spain

Homeowners' association

600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-06-26.

Rank · Sector

#237

of 356 in Individuals and Private Associations

Rank · Spain

#931

of 1,079

Rank · All fines

#2,932

of 3,170

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-06-26
Controller / Processor: Homeowners' association
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine on a Homeowners' association. The association had installed video surveillance cameras which, among other things, also covered the public space. The DPA considered this to be a violation of the principle of data minimization. The DPA also found a breach of the controller's obligation to provide information on data processing under Art. 13 GDPR. The original fine of EUR 1000 was reduced to EUR 600 due to the voluntary payment and the acknowledgement of responsibility.

Open original source Links to the regulator's original publication or another source.