EDA TV CONSULTING, S.L.: Non-compliance with general data processing principles

The Spanish DPA imposed a fine on EDA TV CONSULTING, S.L. The controller had stored copies of personal IDs to verify the identity of data subjects. According to the DPA, the controller infringed the principle of data minimization, because not all informations visibel on the ID were needed for the specific verification process. The original fine of EUR 5,000 was reduced to EUR 3,000 due to immediate payment and admission of responsibility by the controller.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Media, Telecoms and Broadcasting