Enforcement
EN Private Individual: Non-compliance with general data processing principles
€4,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has fined a private individual EUR 4,000 for unauthorized video surveillance. The controller had installed two cameras on a public road and another in a tree which covered parts of a private property. In addition, the DPA found that the controller stored the recordings for longer than necessary. The DPA considered this to be a violation of the principle of data minimization.
GDPR Articles: Art. 5 (1) c), e) GDPR
Industry: Individuals and Private Associations