Sanction RGPD Data Protection Authority of Niedersachsen — Volkswagen : 1,1 M€ (2022)
- Autorité de contrôle
- Data Protection Authority of Niedersachsen
- Pays
- Allemagne
- Entreprise / secteur
- Volkswagen
- Montant de l'amende
- 1,1 M€
- Date de la décision
- 26 juillet 2022
- Fondement juridique
- Art. 13, Art. 28, Art. 30, Art. 35
- Manquement
- Obligation d'information insuffisante
Résumé des faits
The DPA of Lower Saxony has imposed a fine of EUR 1. 1 million on Volkswagen. The company had installed cameras on a test vehicle. The vehicle was being used to test and train the functionality of a driving assistance system to prevent traffic accidents. For this purpose, the traffic around the vehicle was recorded with the cameras. However, Volkswagen failed to provide information in accordance with Art. 13 GDPR about the data processing by the cameras attached to the vehicle. The DPA further found that, contrary to its obligation under Art. 28 GDPR, Volkswagen had not concluded a processing agreement with the company that carried out the journeys. Also, no data protection impact assessment pursuant to Art. 35 DSGVO had been carried out and the technical and organizational protection measures had not been outlined in the list of processing activities. Volkswagen has cooperated extensively with the DPA.