Enforcing jurisdiction
Finland · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Taksi Helsinki – €72,000 Fine (Finland, 2020)

€72,000DPA Tietosuojavaltuutetu26 May 2020Finland
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Taksi Helsinki was fined for serious violations related to how it handled customers' audio and video data. This is important because it shows that companies must follow strict rules when collecting and using personal data, especially for security purposes. Other businesses should take note and ensure they comply with data protection laws.

What happened

Taksi Helsinki failed to comply with GDPR when processing customers' audio and video data.

Who was affected

Customers of Taksi Helsinki whose audio and video data were recorded in vehicles were affected.

What the authority found

The Finnish data protection authority found that Taksi Helsinki did not demonstrate compliance with GDPR's requirements for processing personal data.

Why this matters

This ruling highlights the need for businesses to ensure they are transparent and compliant when using surveillance technologies. Companies should conduct thorough assessments of their data practices.

Recorded legal citations
Automatically processed
Art. 12 GDPR
Art. 26 GDPR
Art. 30 GDPR
Art. 35 GDPR
Art. 5(1)(c) GDPR
Art. 5(2) GDPR
Art. 6(1)(f) GDPR
Art. 13(2)(d) GDPR
Art. 13(2)(e) GDPR
View original scraped data
Art. 5(1)(c) GDPR
Art. 5(2) GDPR
Art. 6(1)(f) GDPR
Art. 12(GDPR)
Art. 13(2)(d) GDPR
Art. 13(2)(e) GDPR
Art. 26(GDPR)
Art. 30(GDPR)
Art. 35(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

Following the investigations carried out in November 2019 on Taksi Helsinki’s processing, the Tietosuojavaltuutetun toimisto found several serious GDPR violations regarding the processing of customers’ audio and video personal data. The Tietosuojavaltuutetun toimisto raised six data protection law issues regarding the processing of both audio and video data which can be summed up as below: - Does the controller process audio and video data for security purposes in accordance with Article 6(1)(f) GDPR? - Does the controller process audio and video data in accordance with 5(1)(c) GDPR? - Does the information provided to data subjects regarding the security camera and the automated decision making process comply with Article 12 GDPR? - Did the controller identify the actors playing a role in the processing, with respect to Articles 4(7), (8) and Articles 26, 28 GDPR (processor, controller, joint controllership)? - Did the controller maintain a record of processing activities according to Article 30 GDPR? - Did the controller perform a data protection impact assessment prior to the implementation for the security camera system, as prescribed under Article 35 GDPR? First, the Tietosuojavaltuutetun toimisto decided that the controller was not able to demonstrate that the processing of video and audio data for security purposes complies with Article 5 (1) (a) and Article 6 (1) (f) GDPR. Thus, the controller failed to comply with the accountability principle under Article 5 (2) GDPR. Second, the data protection authority pointed out that the recording of images and sound in all of the company’s cars did not comply with the principle of data minimisation under Article 5(1)(c) GDPR. The recording of the image would have fit the purposes of safety and the investigation of criminal offences and damages which might have occurred, as claimed by the controller. Regarding the information to be provided to the data subjects, the data protection authority ruled that sever

Details

Fine Date

26 May 2020

Authority

DPA Tietosuojavaltuutetu

Fine Amount

€72,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Taksi Helsinki - Finland (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: