Private Individual – €3,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Spain fined a private individual EUR 3,000 for using security cameras in a residential building without permission. The cameras monitored shared areas, and the owner didn't inform residents about them. This case stresses the importance of respecting privacy in shared living spaces.
What happened
A private individual installed security cameras in a residential building without informing residents.
Who was affected
Residents and visitors of a shared apartment building monitored by the cameras.
What the authority found
The Spanish authority found the camera use excessive and lacking proper notification, violating GDPR rules.
Why this matters
This ruling reminds property owners to respect privacy in communal areas and to inform residents about surveillance. It emphasizes the need for clear communication and consent in shared spaces.
GDPR Articles Cited
The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on a private individual. The controller resides on the 1st floor of an apartment building, where he is the owner of apartments on the 2nd and 3rd floors. He regularly rents out these apartments to tourists. The controller had installed four video cameras on the three floors and in the entrance area of the building. He justified their operation with security concerns related to the rental to tourists. The owners' association had not granted permission for the operation of the cameras. Also, the controller did not put up a sign in the building informing about the operation of the camera. The DPA found this to be a violation of the principle of data minimization, as the cameras covered areas of the building used by the community, whose monitoring was not necessary for the protection of the controller's property. Furthermore, the controller violated its obligation to provide information, as he failed to inform the other residents of the building about the processing of their data.
Related Enforcement Actions (2)
Other enforcement actions involving Private Individual in ES
Fine
€3K
Details
Fine Date
15 April 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
Enforcement Tracker ID
ETid-635
About this data
Cite as: Cookie Fines. Private Individual - Spain (2021). Retrieved from cookiefines.eu
Last updated: