# Private Individual: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2021-07-27
- Original: https://www.enforcementtracker.com/ETid-800
- Canonical: https://overview.legal/posts/46915
- Topics: Video Surveillance, IP Address, Controllers, Processing Agreement, Processing, Monitoring, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA (AEPD) has fined a private individual EUR 4,000 for unauthorized video surveillance. The controller had installed two cameras on a public road and another in a tree which covered parts of a private property. In addition, the DPA found that the controller stored the recordings for longer than necessary. The DPA considered this to be a violation of the principle of data minimization.

## Full text

The Spanish DPA (AEPD) has fined a private individual EUR 4,000 for unauthorized video surveillance. The controller had installed two cameras on a public road and another in a tree which covered parts of a private property. In addition, the DPA found that the controller stored the recordings for longer than necessary. The DPA considered this to be a violation of the principle of data minimization.

GDPR Articles: Art. 5 (1) c), e) GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/46915 · 2026-08-22