Enforcement
EN Private individual: Insufficient legal basis for data processing
€10,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 10,000 on a private individual. The individual, a guard at a detention center, took pictures from the detention center's video surveillance system and forwarded them to colleagues via WhatsApp. The pictures showed a female visitor to the correctional facility. The DPA found that the individual did not have a sufficient legal basis to take and forward the pictures.
GDPR Articles: Art. 6 GDPR
Industry: Individuals and Private Associations