Company – €3,000 Fine (Spain, 2022)

€3,000Agencia Española de Protección de Datos29 November 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Spanish company was fined €3,000 for recording voices without permission through its video surveillance system. The company didn't inform people about the recordings or their rights related to this data. This case highlights the importance of transparency when using surveillance technology.

What happened

A company recorded voices of employees and customers without a valid legal basis using its video surveillance system.

Who was affected

Employees and customers whose voices were recorded by the company's surveillance system.

What the authority found

The Spanish DPA found the company lacked a valid legal basis for recording voices and failed to provide necessary information about the surveillance.

Why this matters

This case underscores the need for businesses to be transparent about surveillance practices and ensure they have a legal basis for collecting such data. Companies should review their surveillance policies to comply with privacy laws.

GDPR Articles Cited

Art. 6 GDPR
Art. 13 GDPR
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 3,000 on a company. The controller had installed a video surveillance system that also recorded the voices of both employees and customers. During its investigation, the DPA found that the controller did not have a valid legal basis for processing the information of the voices as part of the video surveillance. In addition, the DPA found that the controller failed to provide sufficient information about the video surveillance, including information about the processing, the identity of the controller, and the exercise of data subjects' rights.

Details

Fine Date

29 November 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€3,000

Enforcement Tracker ID

ETid-1507

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: