- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Hotel operator – €3,000 Fine (Spain, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A hotel operator in Spain was fined €3,000 for improperly using video surveillance cameras. The Spanish data protection authority found that the hotel did not minimize data collection and failed to inform guests about the CCTV. This case highlights the importance of transparency and data minimization for businesses using surveillance.
What happened
The hotel operator installed video surveillance cameras that covered public spaces and parts of the pool area without proper justification.
Who was affected
Guests and visitors at the hotel who were captured by the surveillance cameras.
What the authority found
The authority ruled that the hotel violated the principle of data minimization and failed to inform individuals about the CCTV usage.
Why this matters
This ruling emphasizes that businesses must be careful about how they use surveillance technology and ensure they inform people appropriately. Companies should review their surveillance practices to comply with data protection rules.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: articles corrected, national law identified, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on a hotel operator. The controller had installed video surveillance cameras which, among other things, also covered the public space and parts of the hotels pool area. The DPA considered this to be a violation of the principle of data minimization. In addition, the controller did not comply with its duty to properly inform about the CCTV.
Related Enforcement Actions (0)
No other enforcement actions found for Hotel operator in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
22 February 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
About this data
Cite as: Cookie Fines. Hotel operator - Spain (2022). Retrieved from cookiefines.eu
Last updated: