Enforcement
EN Waxing Palace AS: Insufficient legal basis for data processing
€9,600 fine - Norwegian Supervisory Authority (Datatilsynet)
Content
The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 9,600 on the waxing salon operator of Waxing Palace AS. The controller had camera surveillance of the controller's reception area. The DPA found that the controller had no legal basis for the camera surveillance, as well as had not provided sufficient information about it. The camera surveillance concerned both employees and customers.
GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Industry: Industry and Commerce