# Company: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-10-17
- Original: https://www.enforcementtracker.com/ETid-1451
- Canonical: https://overview.legal/posts/47566
- Topics: Video Surveillance, Controllers, Monitoring, Processing, Processing Agreement, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA has imposed a fine of EUR 6,000 on a company. The data controller had installed video surveillance cameras which also recorded sound. However, the DPA found that the controller did not have a sufficient legal basis for the surveillance and the recordings therefore had been obtained unlawfully.

## Full text

The Spanish DPA has imposed a fine of EUR 6,000 on a company. The data controller had installed video surveillance cameras which also recorded sound. However, the DPA found that the controller did not have a sufficient legal basis for the surveillance and the recordings therefore had been obtained unlawfully.

GDPR Articles: Art. 6 GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/47566 · 2026-08-22