Spain

Bar owner

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-09-28.

Rank · Sector

#46

of 100 in Accomodation and Hospitality

Rank · Spain

#623

of 1,075

Rank · All fines

#2,047

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-09-28
Controller / Processor: Bar owner
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 (1) b) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA (AEPD) has fined a bar owner EUR 3,000. A data subject had filed a complaint with the DPA. He had suffered an accident in the bar which was recorded by the surveillance cameras. The controller states that he had installed the surveillance cameras for security purposes. At a later date, the video was distributed via WhatsApp and published in a digital newspaper. The data subject claims to be personally affected in his reputation by the publication of the video. The DPA concludes that the publication of the images was not related to the purpose of the video surveillance and that the controller therefore violated Art. 5 (1) b) GDPR.

Open original source Links to the regulator's original publication or another source.