# AEPD (Spain) - PS-00637-2025

- Type: Enforcement
- Source: AEPD
- Date: 2026-08-26
- Original: https://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS-00637-2025
- Canonical: https://overview.legal/posts/353483
- Topics: Video Surveillance, Monitoring, Supervisory Authorities, Video Surveillance, Retention Period, Controllers, Personal Data

## Summary

The AEPD fined an employer €4,000 for continuously recording workplace audio through CCTV. The measure was disproportionate and violated the data minimisation principle under Article 5(1)(c) GDPR. English Summary. Facts. On 22 April 2025, a data subject lodged a complaint with the Spanish Data Protection Authority (AEPD) against BODENSE ESTRUCTURAS Y CALDELERÍA, S.L., the controller. The data subject claimed that the controller had installed cameras recording both images and audio in workplace a

## Full text

The AEPD fined an employer €4,000 for continuously recording workplace audio through CCTV. The measure was disproportionate and violated the data minimisation principle under Article 5(1)(c) GDPR. English Summary. Facts. On 22 April 2025, a data subject lodged a complaint with the Spanish Data Protection Authority (AEPD) against BODENSE ESTRUCTURAS Y CALDELERÍA, S.L., the controller. The data subject claimed that the controller had installed cameras recording both images and audio in workplace areas and had relied on the recordings in disciplinary proceedings against them. The controller confirmed that its video surveillance system, installed in 2019, consisted of seven cameras and was capable of recording both images and sound. Recordings were stored for seven days and could be accessed by the controller's security manager. The controller stated that the system pursued both security and employee-monitoring purposes. The controller argued that audio recording was necessary because

---
Generated by overview.legal · https://overview.legal/posts/353483 · 2026-08-26