Sanction RGPD Spanish Data Protection Authority (aepd) — Private individual : 10 k€ (2023)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Private individual
- Montant de l'amende
- 10 k€
- Date de la décision
- 12 juillet 2023
- Fondement juridique
- Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA has imposed a fine of EUR 10,000 on a private individual. The individual, a guard at a detention center, took pictures from the detention center's video surveillance system and forwarded them to colleagues via WhatsApp. The pictures showed a female visitor to the correctional facility. The DPA found that the individual did not have a sufficient legal basis to take and forward the pictures.