Hotel operator – €3,000 Fine (Spain, 2022)

€3,000Agencia Española de Protección de Datos22 February 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A hotel in Spain was fined EUR 3,000 for having surveillance cameras that recorded public areas and not informing people properly. This is important because businesses must limit surveillance to necessary areas and clearly inform people about it to comply with privacy laws.

What happened

A hotel operator installed CCTV cameras that covered public spaces and did not properly inform people about the surveillance.

Who was affected

Guests and people in the public areas around the hotel who were recorded by the CCTV cameras.

What the authority found

The Spanish Data Protection Authority fined the hotel for violating data minimization principles and failing to inform people about the CCTV, as required by GDPR.

Why this matters

This case emphasizes the need for businesses to limit surveillance to necessary areas and ensure clear communication about it. Hotel operators should review their CCTV practices to avoid similar fines and ensure compliance with privacy regulations.

GDPR Articles Cited

Art. 13 GDPR
Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on a hotel operator. The controller had installed video surveillance cameras which, among other things, also covered the public space and parts of the hotels pool area. The DPA considered this to be a violation of the principle of data minimization. In addition, the controller did not comply with its duty to properly inform about the CCTV.

Related Enforcement Actions (0)

No other enforcement actions found for Hotel operator in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

22 February 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€3,000

Enforcement Tracker ID

ETid-1086

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Hotel operator - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: