Supermarket

What happened

The Belgian DPA reprimands a supermarket for lack of legal basis to check CCTV images to resolve a customer complaint. The DPA stated that the employees accessing the CCTV also should have received more in-depth training.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a) · 5(2)Read →
• Art. 6Lawfulness of processing6(1) · 6(1)(a) · 6(1)(f)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1) · 12(2)Read →
• Art. 13Information to be provided where personal data are collected from the data subject13(1) · 13(2)Read →
• Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
• Art. 24Responsibility of the controller24(1) · 24(2)Read →
• Art. 25Data protection by design and by default25(1) · 25(2)Read →

• Accountability
• Data principles
• Transparency
• Unlawful processing