France

Employer UNIONTRAD COMPANY

20,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2019-06-13.

Rank · Sector

#57

of 213 in Employment

Rank · France

#55

of 74

Rank · All fines

#1,026

of 3,050

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2019-06-13
Controller / Processor: Employer UNIONTRAD COMPANY
Sector: Employment
Quoted Articles: Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 32 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Between 2013 and 2017, the CNIL received complaints from several employees of the company who were filmed at their workstation. On two occasions, it alerted the company to the rules to be observed when installing cameras in the workplace, in particular, that employees should not be filmed continuously and that information about the data processing has to be provided. In the absence of satisfactory measures at the end of the deadline set in the formal notice, the CNIL carried out a second audit in October 2018 which confirmed that the employer was still breaching data protection laws when recording employees with CCTV. When determening the amount of the fine, the CNIL took into account the size (9 employees) and the financial situation of the company, which presented a negative net result in 2017 (turnover of 885,739 EUR in 2017 and a negative net result of 110,844 EUR), to retain a dissuasive but proportionate administrative fine.

Open original source Links to the regulator's original publication or another source.