Shop Owner – €1,500 Fine (Austria, 2025)

€1,500Datenschutzbehörde27 October 2025Austria
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Austrian shop owner was fined for using video cameras that recorded not just her shop but also the public area outside. Additionally, she shared a photo of a person captured by the cameras in an effort to identify them after a theft. This case shows the importance of respecting privacy when using surveillance.

What happened

A shop owner used video surveillance that captured footage of public areas and shared a photo of a suspected thief without consent.

Who was affected

The individuals affected included the person in the photo and anyone recorded in the public area outside the shop.

What the authority found

The authority ruled that the shop owner violated GDPR rules by not limiting surveillance to her shop and improperly sharing a person's image.

Why this matters

This ruling highlights the need for businesses to carefully consider privacy laws when using surveillance cameras. Shop owners should ensure their surveillance practices are compliant to avoid fines.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 6(1)(f) GDPR
View original scraped data
Art. 5(1) a) GDPR
c) GDPR
Art. 6(1) f GDPR

Original data from scraper before AI verification against source document.

Source verified 8 April 2026
articles corrected
Full Legal Summary
Detailed

The Austrian DPA has imposed a fine of EUR 1,500 on a shop owner. The controller used video surveillance to protect her shop. However, the cameras captured not only the shop itself, but also the public area in front of it. Additionally, the controller posted a photo of an individual captured by the video surveillance in an attempt to identify the person, who had been accused of stealing from the shop.

Related Enforcement Actions (0)

No other enforcement actions found for Shop Owner in AT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

27 October 2025

Authority

Datenschutzbehörde

Fine Amount

€1,500

Enforcement Tracker ID

ETid-3073

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Shop Owner - Austria (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: