Spain

SIPHONE 2020, S.L.

4,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-04-28.

Rank · Sector

#151

of 213 in Employment

Rank · Spain

#577

of 1,075

Rank · All fines

#1,949

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-04-28
Controller / Processor: SIPHONE 2020, S.L.
Sector: Employment
Quoted Articles: Art. 6 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 4,000 on SIPHONE 2020, S.L. The controller had installed video surveillance on its business premises. The system captured video and audio, including employees' conversations. Employees had not been adequately informed or given their consent for this processing. There were only two undated employee information notes and a video surveillance sign that did not contain all the necessary information. Furthermore, the processing of the audio data was not based on sufficient legal grounds.

Open original source Links to the regulator's original publication or another source.