Autoriteit Persoonsgegevens – Court Ruling (Netherlands, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Dutch court ruled that a homeowners' association could use surveillance cameras to protect property, even though one resident complained about privacy invasion. The court found the cameras were necessary for security and did not process sensitive data. This decision highlights the balance between security measures and individual privacy rights.
What happened
The court upheld the use of new surveillance cameras by a homeowners' association despite a resident's privacy concerns.
Who was affected
The resident who complained about the new surveillance cameras in the apartment complex.
What the authority found
The court decided that the homeowners' association had a legitimate interest in using the cameras for security, which outweighed the resident's privacy concerns.
Why this matters
This case illustrates that security measures can be justified even when they impact privacy. Businesses should consider how to implement security while respecting individual privacy rights.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The data subject owns an apartment in an apartment complex. The Association of (home) Owners (hereafter: VvE), of which the data subject is a member, decided to replace the old surveillance cameras with new ones. According to the data subject, the new surveillance system led to an invasion of her privacy. She also stated that the new cameras could process biometrical data (which is sensitive data, Article 9(1) GDPR). The VvE argued that the purpose of the camera surveillance is to protect the property of the common parts as well as the flats. They added that incidents of burglary and damage had occurred in the past, and that these new cameras are an appropriate security measure. Then, the VvE stated that this measure is not disproportionate since the cameras do not show the public road and do not process more data than is necessary. Moreover, the VvE claimed that protecting the property of the VvE and its residents cannot be achieved in any other way. Lastly, the VvE argued that their legitimate interest (Article 6(1)(f) GDPR) outweighed the data subject's interest of privacy since data subject is only filmed when she is in common areas, the VvE has built in sufficient safeguards (technical and organisational), and people passing by are notified of the surveillance via a sign. The data subject filed a complaint with the AP (Dutch DPA) and, after the DPA rejected the complaint, brought the action before court. First, the Court considered whether the measure was necessary by assessing the proportionality and subsidiarity of the measure. It held that the requirement of proportionality was met since the cameras do not allow the processing of biometrical data, and clear images of filmed people are justified by the fact that, in cases of damage, it needs to be clear against whom the charges are to be made. The requirement of subsidiarity was also met since the objective of the surveillance could be achieved in a less intrusive manner. Second, the Court conducted
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (10)
Other cases involving Autoriteit Persoonsgegevens in NL
Court Ruling
Details
About this data
Cite as: Cookie Fines. Autoriteit Persoonsgegevens - Netherlands (2021). Retrieved from cookiefines.eu
Last updated: