Sanction RGPD Austrian Data Protection Authority (dsb) — Bakery Chain : 34 k€ (2025)
- Autorité de contrôle
- Austrian Data Protection Authority (dsb)
- Pays
- Autriche
- Entreprise / secteur
- Bakery Chain
- Montant de l'amende
- 34 k€
- Date de la décision
- 5 septembre 2025
- Fondement juridique
- Art. 5 (1) a), c), Art. 6 (1), (4)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Austrian DPA has imposed a fine of EUR 33,500 on a bakery chain. The controller used video surveillance which affected both public areas and areas intended solely for employees. The cameras were installed and operated in a way that did not comply with the principle of data minimisation and was not based on a sufficient legal basis. Additionally, CCTV footage was distributed via a messaging service.