Enforcement
EN Company: Insufficient legal basis for data processing
€6,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 6,000 on a company. The data controller had installed video surveillance cameras which also recorded sound. However, the DPA found that the controller did not have a sufficient legal basis for the surveillance and the recordings therefore had been obtained unlawfully.
GDPR Articles: Art. 6 GDPR
Industry: Not assigned