Austrian Data Protection Authority (DSB) · 27 October 2025
Shop Owner
Insufficient legal basis for data processing
Fine€1,500Fine issued
- Regulator
- Austrian Data Protection Authority (DSB)
- Decided
- 27 October 2025
- Country
- Austria
- Sector
- Individuals and Private Associations
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/AT/007
What happened
The DPA fined a controller €1,500 for unlawfully recording a public sidewalk with a CCTV camera and for publishing images of a suspected thief on social media, thereby breaching the principles of data minimisation and transparency, as well as the rules governing the processing of criminal data.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/AT/007.