Restaurant owner: Non-compliance with general data processing principles

The Spanish DPA has imposed a fine on a private individual. The data controller had installed a video surveillance camera in their restaurant, which also captured the guest area. The DPA found that such extensive recording of the guests was not necessary and considered this to be a violation of the principle of data minimization. The original fine of EUR 4,000 was reduced to EUR 2,400 due to the voluntary payment and admission of responsibility.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Accomodation and Hospitality