# Concordia Capital IFN S.A.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2022-05-04
- Original: https://www.enforcementtracker.com/ETid-1148
- Canonical: https://overview.legal/posts/47263
- Topics: Video Surveillance, Monitoring, Insurance, Controllers, Supervisory Authorities, Processing Agreement, Processing, Supervision, Personal Data, Data Controller

## Summary

The Romanian DPA has fined Concordia Capital IFN S.A. EUR 4,000. The controller had unlawfully installed audio and video cameras in the offices of its employees. The video surveillance was intended to protect the company's employees and goods. The DPA however stated that the controller violated Art. 5 GDPR and Art. 6 GDPR, as such extensive surveillance was not necessary.

## Full text

The Romanian DPA has fined Concordia Capital IFN S.A. EUR 4,000. The controller had unlawfully installed audio and video cameras in the offices of its employees. The video surveillance was intended to protect the company's employees and goods. The DPA however stated that the controller violated Art. 5 GDPR and Art. 6 GDPR, as such extensive surveillance was not necessary.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/47263 · 2026-08-22