Sanction RGPD Icelandic data protection authority ('Persónuvernd') — Stjörnuna ehf : 10 k€ (2024)
- Autorité de contrôle
- Icelandic data protection authority ('Persónuvernd')
- Pays
- Islande
- Entreprise / secteur
- Stjörnuna ehf
- Montant de l'amende
- 10 k€
- Date de la décision
- 24 mars 2024
- Fondement juridique
- Art. 5 (1) a), b), c), Art. 6, Art. 12, Art. 13
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Icelandic DPA has imposed a fine of EUR 10,000 on Stjörnuna ehf. (the operator of a Subway branch). An employee had filed a complaint with the DPA regarding video surveillance in the restaurant. During its investigation, the DPA found that the video surveillance of the employees lacked a valid legal basis and was not considered necessary. The DPA also found that the controller failed to inform the employees about the video surveillance.