- Enforcing jurisdiction
- Iceland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Huppuís ehf – €34,000 Fine (Iceland, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Huppuís ehf was fined €34,000 for using video cameras in a changing area where employees, including minors, had to change clothes. The Icelandic data protection authority found that while the company had a reason for the surveillance, it didn't protect the privacy of its young workers adequately. This case highlights the importance of considering employee privacy when implementing security measures.
What happened
Huppuís ehf installed video surveillance in a changing area used by employees, including minors, without proper privacy protections.
Who was affected
Employees of Huppuís ehf, particularly minors, who changed clothes in a monitored area.
What the authority found
The authority ruled that Huppuís ehf failed to balance its security interests with the privacy rights of its employees, violating GDPR requirements.
Why this matters
This ruling emphasizes that companies must prioritize employee privacy when using surveillance. Businesses should review their security practices to ensure they are not infringing on workers' rights.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 12 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Icelandic DPA (Persónuvernd) has imposed a fine of EUR 34,000 on Huppuís ehf. A former employee filed a complaint against the controller with the DPA. The reason for this was the camera surveillance installed by the controller. During their shifts, the controller's employees wore clothing provided by the controller.However, the designated changing room of the store was a storage room in which large quantities of cleaning materials were stored. Due to a lack of sufficient space in this room, the employees (mostly minors) had to change in the general employee area, which was covered by a video camera. The controller stated that they had installed the video camera for security purposes. The DPA concluded that the controller had a legitimate interest in the video surveillance, but that the interests of the mostly underage employees must also be taken in account. The controller should have tried to implement less restrictive measures. In addition, the DPA underlined that the information on video surveillance was inadequate in both the employee and customer service areas. In determining the amount of the fine, the fact that a large number of the data subjects were minors was taken into account as an aggravating factor.
Related Enforcement Actions (0)
No other enforcement actions found for Huppuís ehf in IS
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 June 2021
Authority
Persónuvernd
Fine Amount
€34,000
About this data
Cite as: Cookie Fines. Huppuís ehf - Iceland (2021). Retrieved from cookiefines.eu
Last updated: