Improper disposal of customer data and unlawful video surveillance
After the data protection authority received a tip about unauthorized data processing at a pharmacy, investigations were carried out at the pharmacy. During the investigation, numerous records and documents were found in a garbage room, which contained personal data of the special category. The garbage room in which they were stored could be easily entered by unauthorized persons. As a result of the significant violation, a fine in the amount of 6500 euros was determined.
Furthermore, in the course of the investigation, it was found that there is video surveillance in the pharmacy, which was not signposted. Among other things, the latter monitored the workers’ workstations. An additional fine was waived as part of a partial settlement.
Entscheidungsdatum:
31.12.2022
Land:
Germany
Art des Verstoßes:
Illegal data processing
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
Yes
verhängte Geldstrafe:
€ 6,500,-
Violation of GDPR Paragraph:
5. Principles relating to personal data processing