Finland

Taksi Helsinki

72,000 €

GDPR enforcement action by Deputy Data Protection Ombudsman on 2020-05-29.

Rank · Sector

#72

of 167 in Transportation and Energy

Rank · Finland

#15

of 27

Rank · All fines

#570

of 3,050

Case details

Authority: Deputy Data Protection Ombudsman
Date: 2020-05-29
Controller / Processor: Taksi Helsinki
Sector: Transportation and Energy
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 35 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

Among other things, the company had not assessed the risks and consequences of processing personal data before introducing a camera surveillance system that records audio and video in its taxis and had also failed to conduct data protection impact assessments of its processing activities, including the surveillance of security cameras, the processing of location data, automated decision making and profiling as part of its loyalty program. Furthermore, the processing of audio data was not in line with the GDPR principle of data minimization.

Open original source Links to the regulator's original publication or another source.