Municipality of Moschato–Tavros: Insufficient legal basis for data processing

The Hellenic DPA has imposed a fine of EUR 10,000 on the Municipality of Moschato–Tavros. The controller installed a video surveillance system in a depot to protect municipal vehicles. However, the controller failed to ensure, during the design phase, that the cameras only processed the necessary data. They also failed to adequately inform their employees and record the processing activities.

GDPR Articles: Art. 5 (1) a), c), (2) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 25 (1) GDPR
Industry: Public Sector and Education