Store owner – €360 Fine (Spain, 2022)

€360Agencia Española de Protección de Datos4 September 2022Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A store owner in Spain was fined EUR 360 for improperly using surveillance cameras that recorded public spaces and not informing people about the data collection. This case shows that businesses must be careful about where they point their cameras and must inform people about surveillance.

What happened

The store owner installed video surveillance cameras that recorded public spaces and failed to inform people about the data collection.

Who was affected

People who were recorded by the store's surveillance cameras without proper notification.

What the authority found

The Spanish DPA found that the store owner violated GDPR by not minimizing data collection and failing to inform individuals about the surveillance.

Why this matters

This ruling emphasizes the importance of data minimization and transparency in video surveillance. Store owners should ensure their cameras do not capture unnecessary areas and must clearly inform people about any data collection.

GDPR Articles Cited

Art. 13 GDPR
Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine on a store owner. The controller had installed video surveillance cameras which, among other things, also covered the public space. The DPA considered this to be a violation of the principle of data minimization. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform. The original fine of EUR 600 was reduced to EUR 360 due to voluntary payment and admission of responsibility.

Details

Fine Date

4 September 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€360

Enforcement Tracker ID

ETid-1388

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Store owner - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: