Not named in the source

What happened

The HDPA of Greece examined a complaint of four data subjects (namely, the two owners of the property, a Private Company [P.C.] - renter of the property for the purposes of completing the ongoing on-site construction work , and the legal representative of said company) against a data processor regarding the violation of their right to protect their personal data and of their privacy. The case revolved around the latter person’s action of installing and making use of a video surveillance system including two cameras within their own property, but whose area of surveillance included the complainants’ property and public street. The HDPA, after addressing the meaning of the data processing principles (Article 5 GDPR) and the details of data processing via video surveillance, it made use of its corrective powers (Article 58(2) GDPR) in order for the violation of Article 5 GDPR to be restored, as well as of its authority to impose an administrative fine that amounted to 8,000 EUR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 2Material scope2(2)(c)Read →
• Art. 4Definitions4(1)Read →
• Art. 5Principles relating to processing of personal data5(1) · 5(2)Read →
• Art. 6Lawfulness of processingRead →
• Art. 24Responsibility of the controller24(1)Read →
• Art. 32Security of processingRead →
• Art. 58Powers58(2)Read →
• Art. 83General conditions for imposing administrative finesRead →

• Accountability
• Data principles
• Data security
• Unlawful processing