Enforcement
EN Homeowners Association: Non-compliance with general data processing principles
€600 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 600 on a homeowners' association. The controller had installed a video surveillance system that recorded both images and sound. During its investigation, the DPA found that the video surveillance system recorded, among other things, parts of the common area. The DPA considered this to be a violation of the principle of data minimization. In addition, the DPA found that the controller did not sufficiently comply with its information obligations under Art. 13 GDPR regarding the video surveillance.
GDPR Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Industry: Real Estate