Romania

Apartment building owners association

500 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-09-01.

Rank · Sector

#77

of 86 in Real Estate

Rank · Romania

#269

of 283

Rank · All fines

#2,851

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-09-01
Controller / Processor: Apartment building owners association
Sector: Real Estate
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 25 GDPR, Art. 32 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Export of a still image from a video surveillance system and posting of the image on the billboard of the building without sufficient legal basis. In addition, violation of the information obligations under Art. 12, 13 GDPR and violation of Art. 25 and 32 GDPR, because no sufficient information about the CCTV was given and because no sufficient technical and organizational security measures were taken to protect the personal data collected by the video surveillance system.

Open original source Links to the regulator's original publication or another source.