Austria

Shop Owner

1,500 €

GDPR enforcement action by Austrian Data Protection Authority (dsb) on 2025-10-27.

Rank · Sector

#165

of 351 in Individuals and Private Associations

Rank · Austria

#28

of 38

Rank · All fines

#2,522

of 3,042

Case details

Authority: Austrian Data Protection Authority (dsb)
Date: 2025-10-27
Controller / Processor: Shop Owner
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) f GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Austrian DPA has imposed a fine of EUR 1,500 on a shop owner. The controller used video surveillance to protect her shop. However, the cameras captured not only the shop itself, but also the public area in front of it. Additionally, the controller posted a photo of an individual captured by the video surveillance in an attempt to identify the person, who had been accused of stealing from the shop.

Open original source Links to the regulator's original publication or another source.