Enforcement
EN Bakery Chain: Non-compliance with general data processing principles
€33,500 fine - Austrian Data Protection Authority (dsb)
Content
The Austrian DPA has imposed a fine of EUR 33,500 on a bakery chain. The controller used video surveillance which affected both public areas and areas intended solely for employees. The cameras were installed and operated in a way that did not comply with the principle of data minimisation and was not based on a sufficient legal basis. Additionally, CCTV footage was distributed via a messaging service.
GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1), (4) GDPR
Industry: Industry and Commerce