- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Bar owner – €3,000 Fine (Spain, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A bar owner was fined EUR 3,000 after a video of an accident in the bar was shared without permission. The bar had installed cameras for security, but the footage was misused when it was shared online. This case highlights the importance of using surveillance footage only for its intended purpose.
What happened
The bar owner shared surveillance footage of an accident without the person's consent.
Who was affected
The individual whose accident was recorded and later shared publicly.
What the authority found
The authority determined that the bar owner violated GDPR by using the footage for purposes unrelated to security.
Why this matters
This case underscores the need for businesses to handle surveillance footage responsibly and only for its intended purpose. Companies should establish clear policies on how such footage is used.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has fined a bar owner EUR 3,000. A data subject had filed a complaint with the DPA. He had suffered an accident in the bar which was recorded by the surveillance cameras. The controller states that he had installed the surveillance cameras for security purposes. At a later date, the video was distributed via WhatsApp and published in a digital newspaper. The data subject claims to be personally affected in his reputation by the publication of the video. The DPA concludes that the publication of the images was not related to the purpose of the video surveillance and that the controller therefore violated Art. 5 (1) b) GDPR.
Related Enforcement Actions (2)
Other enforcement actions involving Bar owner in ES
Fine
€3K
Details
Fine Date
28 September 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
About this data
Cite as: Cookie Fines. Bar owner - Spain (2021). Retrieved from cookiefines.eu
Last updated: