Sanction RGPD Spanish Data Protection Authority (aepd) — Restaurant owner : 2 k€ (2024)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Restaurant owner
- Montant de l'amende
- 2 k€
- Date de la décision
- 25 mars 2024
- Fondement juridique
- Art. 5 (1) c)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has imposed a fine on a private individual. The data controller had installed a video surveillance camera in their restaurant, which also captured the guest area. The DPA found that such extensive recording of the guests was not necessary and considered this to be a violation of the principle of data minimization. The original fine of EUR 4,000 was reduced to EUR 2,400 due to the voluntary payment and admission of responsibility.