Supermarket – Fine (Germany, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A supermarket in Bremen faced scrutiny after a store detective took a photo of a suspected shoplifter and shared it via WhatsApp without a proper legal reason. Although no fine was imposed, the case underscores the importance of respecting privacy even in security operations. Businesses should be cautious about sharing personal images without a clear legal basis.
What happened
A store detective took and shared a photo of a suspected shoplifter via WhatsApp without a sufficient legal basis.
Who was affected
The individual photographed by the store detective during the alleged theft incident.
What the authority found
The Bremen DPA found that the supermarket lacked a valid legal basis for sharing the photo, breaching privacy rules.
Why this matters
This case highlights the need for businesses to ensure they have a legal basis for processing and sharing personal data, especially in security contexts. It serves as a cautionary tale for retailers using technology in loss prevention.
The DPA of Bremen has imposed a fine on a supermarket. A store detective had taken a photo of the data subject on the occasion of an alleged theft and transmitted it via the messenger service WhatsApp to the manager, the store manager and two closing staff members, allegedly to enforce house rules but without a sufficient legal basis.
Related Enforcement Actions (1)
Other enforcement actions involving Supermarket in DE
Details
Fine Date
1 January 2022
Authority
Bundesbeauftragter für den Datenschutz
Enforcement Tracker ID
ETid-1729
About this data
Cite as: Cookie Fines. Supermarket - Germany (2022). Retrieved from cookiefines.eu
Last updated: