Illegal video surveillance
A company with sites in several locations installed a network of surveillance cameras on their premises. Both image and sound recordings were made and stored. Upon request, management said that these cameras serve multiple purposes. They should prevent vandalism and serve as evidence in disputes. In addition, the company also stated that these would have a positive effect on work performance.
The DPA called the monitoring “excessive” and considered that this was disproportionate to the intended use. Especially the fact that sound and image recordings were made and these were also stored disturbed the authority. In addition, data subjects were not informed of the nature and purpose of the data processing, which constitutes a violation of Paragraph 13 of the General Data Protection Regulation.
It imposed a fine of € 5,000 on the company. Furthermore, the disassembly of the surveillance system and the deletion of all records was ordered .
Conclusion
Video surveillance was a sensitive issue even before the introduction of the GDPR. It is clear that monitoring must serve a defined purpose and that proportionality must be given. Otherwise you will not only have to expect a fine but also a complete disassembly of your cameras. If you are unsure whether your video surveillance complies with the applicable regulations, then take advantage of our easyGDPR consulting. Our certified data protection experts will gladly advise you.
Entscheidungsdatum:
21.09.2018
Land:
Cyprus
Art des Verstoßes:
Illegal data collection
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 5,000,-
Violation of GDPR Paragraph:
13. Information to be provided where personal data are collected from the data subject
5. Principles relating to personal data processing
Quelle: