# Cafetería Nagasaki: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2020-02-04
- Original: https://www.enforcementtracker.com/ETid-201
- Canonical: https://overview.legal/posts/46316
- Topics: Video Surveillance, Monitoring, Processing, Healthcare, Supervisory Authorities

## Summary

The AEPD found that the Nagasaki Cafetería did not comply with its obligations under the GDPR, as it placed its surveillance cameras in such a way as to monitor the public space outside its premises, which disproportionately affected pedestrians.

## Full text

The AEPD found that the Nagasaki Cafetería did not comply with its obligations under the GDPR, as it placed its surveillance cameras in such a way as to monitor the public space outside its premises, which disproportionately affected pedestrians.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Accomodation and Hospitality

---
Generated by overview.legal · https://overview.legal/posts/46316 · 2026-08-22