ANSPDCP (Romania) · 23 September 2023
BODY LINE SRL
About: Data principles, Data security, Data subject rights, Special categories, Unlawful processing
- Regulator
- ANSPDCP (Romania)
- Decided
- 23 September 2023
- Country
- Romania
- Sector
- Not given
- Regulator’s reference
- 23.08.2023
- Fino case number
- 2023/RO/052
What happened
The Romanian DPA investigated controller BODY LINE SRL and found that it had violated Articles 5, 6, 9, 17, 32(1) and 32(2) GDPR, because an employee of the company had posted a video of the data subject on social media from the company's surveillance system. As a result, the controller was fined a total of 49,322 RON (equivalent to €10,000).
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 9Processing of special categories of personal dataRead →
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Art. 32Security of processingRead →
- Data principles
- Data security
- Data subject rights
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/RO/052.