# Restaurant owner: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2024-03-25
- Original: https://www.enforcementtracker.com/ETid-2332
- Canonical: https://overview.legal/posts/48447
- Topics: Video Surveillance, Controllers, IP Address, Processing, Monitoring, Data Controller, Processing Agreement, Healthcare, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA has imposed a fine on a private individual. The data controller had installed a video surveillance camera in their restaurant, which also captured the guest area. The DPA found that such extensive recording of the guests was not necessary and considered this to be a violation of the principle of data minimization. The original fine of EUR 4,000 was reduced to EUR 2,400 due to the voluntary payment and admission of responsibility.

## Full text

The Spanish DPA has imposed a fine on a private individual. The data controller had installed a video surveillance camera in their restaurant, which also captured the guest area. The DPA found that such extensive recording of the guests was not necessary and considered this to be a violation of the principle of data minimization. The original fine of EUR 4,000 was reduced to EUR 2,400 due to the voluntary payment and admission of responsibility.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Accomodation and Hospitality

---
Generated by overview.legal · https://overview.legal/posts/48447 · 2026-08-22