Spain

Individual

1,200 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-01-20.

Rank · Sector

#168

of 352 in Individuals and Private Associations

Rank · Spain

#790

of 1,079

Rank · All fines

#2,580

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-01-20
Controller / Processor: Individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) c) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The controller installed cameras on his building, which were directed towards parts of the public space. However, no recording took place, as the cameras only served as a deterrent and remained inactive. The DPA notes, however, that even simulated video surveillance has an impact on the privacy of the data subjects, as they are led to believe that they are being permanently recorded by the cameras. According to the DPA, this has an intimidating effect. Therefore, the orientation of the cameras to the public space was also improper in this case. The DPA imposed a fine of EUR 2,000 on the controller, which was reduced to EUR 1,200 due to immediate payment and acknowledgement of guilt.

Open original source Links to the regulator's original publication or another source.