- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case PS/00023/2020 – Violation Found (Spain, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Spanish data protection authority found that a homeowner's video surveillance system violated privacy rules. The system captured images of neighboring properties and public areas without proper authorization. This case serves as a reminder for individuals to consider privacy implications when installing surveillance equipment.
What happened
The homeowner's video cameras captured excessive images of neighboring areas without authorization.
Who was affected
Neighbors and passersby whose images were captured by the surveillance system.
What the authority found
The authority determined that the installation of the cameras violated Article 5(1)(c) of the GDPR due to disproportionate data capture.
Why this matters
This finding highlights the need for individuals to be aware of privacy laws when using surveillance systems, ensuring that they do not infringe on the rights of others.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA analyzed the possible unlawfulness of the installation of a video surveillance system composed of 3 cameras located outside a house in SANTA CRUZ DE TENERIFE, a system that could capture images of neighbouring areas of houses in a disproportionate manner, as well as an automatic door phone for private use outside the building, all without the corresponding authorization of the Neighbours' Community. The authorization of the Homeowners' Association has not been accredited for the installation of the above-mentioned devices, having to comply with the requirements established by Law 49/1960 of 21 July on horizontal property (LPH). This law regulates that the installation of a video surveillance system by a private individual will require the authorization of the Community of Owners' Meeting both when it is planned to be located in a common area and when, even if located in a private use area, it is oriented towards surrounding common areas and captures - respecting, in any case, the principle of data minimization - tangentially these common areas. Is the installation of security cameras that capture images of the neighborhood and the street a violation of Article 5 (1) (c) GDPR? The Spanish DPA has found that the facts of the present proceedings show that 2 of the 3 cameras installed by the claimant capture a disproportionate share of communal areas, neighbouring housing, and even public roads. This situation is not covered by the exclusion set out in Article 22.5 of LOPDGDD as the capture of images that exceed the verification about the identity of people trying to access an address beyond the treatment "carried out by a natural person in the exercise of exclusively private or domestic activities" of Article 2.2.c) of the RGPD. The same consideration must be extended to the video door entry system installed on the exterior wall of the Community, since its location cannot be compared to the video door phone installed at the front door of a house. As
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case PS/00023/2020 in ES
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case PS/00023/2020 - Spain (2020). Retrieved from cookiefines.eu
Last updated: