Enforcement
EN Alava Norte, S.L.: Non-compliance with general data processing principles
€4,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has fined Alava Norte, S.L. EUR 4,000. The controller had installed three 360° video surveillance cameras on the facade of one of its buildings to secure the facility. These also captured parts of the public space. The AEPD considered this to be a violation of the principle of data minimization, as such extensive video surveillance was not necessary to fulfill the purpose of the processing (security of the facility).
GDPR Articles: Art. 5 (1) c) GDPR
Industry: Industry and Commerce