Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) · 15 April 2021
S.C. Tip Top Food Industry S.R.L
Insufficient legal basis for data processing
- Regulator
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Decided
- 15 April 2021
- Country
- Romania
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/RO/018
What happened
The Romanian DPA fined a company €5000 (RON 24,362.50) for violating the data minimisation principle. The DPA held that CCTV surveillance in a workplace is excessive and does not respect the data minimisation principle when employees are recorded in spaces like cloakrooms or dining areas. Additionally, consent given by employees for such processing cannot be considered freely given.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processingRead →
- Art. 7Conditions for consentRead →
- Consent
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/RO/018.