Norway

Basaren Drift AS

19,900 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2021-03-21.

Rank · Sector

#16

of 100 in Accomodation and Hospitality

Rank · Norway

#37

of 53

Rank · All fines

#1,111

of 3,050

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2021-03-21
Controller / Processor: Basaren Drift AS
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 19,900 on Basaren Drift AS. The controller had installed video cameras in its premises which recorded both its employees and customers. The Norwegian DPA concluded that the controller had no legal basis for the camera surveillance. In addition, the Norwegian DPA found that the controller did not provide sufficient information on the surveillance to the data subjects.

Open original source Links to the regulator's original publication or another source.