Austria

Bakery Chain

33,500 €

GDPR enforcement action by Austrian Data Protection Authority (dsb) on 2025-09-05.

Rank · Sector

#126

of 597 in Industry and Commerce

Rank · Austria

#11

of 38

Rank · All fines

#872

of 3,050

Case details

Authority: Austrian Data Protection Authority (dsb)
Date: 2025-09-05
Controller / Processor: Bakery Chain
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1), (4) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Austrian DPA has imposed a fine of EUR 33,500 on a bakery chain. The controller used video surveillance which affected both public areas and areas intended solely for employees. The cameras were installed and operated in a way that did not comply with the principle of data minimisation and was not based on a sufficient legal basis. Additionally, CCTV footage was distributed via a messaging service.

Open original source Links to the regulator's original publication or another source.