# Company: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-10-09
- Original: https://www.enforcementtracker.com/ETid-1430
- Canonical: https://overview.legal/posts/47545
- Topics: Video Surveillance, Controllers, Monitoring, Processing, Processing Agreement, Supervisory Authorities, Access Controls, Data Controller, Law Enforcement

## Summary

The Spanish DPA has imposed a fine of EUR 800 on a company. The controller had installed video surveillance cameras without obtaining authorization for the installation. In addition, the controller failed to provide signs regarding the CCTV with the contact details of the data controller.

## Full text

The Spanish DPA has imposed a fine of EUR 800 on a company. The controller had installed video surveillance cameras without obtaining authorization for the installation. In addition, the controller failed to provide signs regarding the CCTV with the contact details of the data controller.

GDPR Articles: Art. 6 (1) e) GDPR, Art. 13 GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/47545 · 2026-08-22