Restaurant ownerPrivate person

What happened

The DPA found that a restaurant owner unlawfully recorded data subjects on a public street and monitored employees and guests without a valid legal basis. The DPA prohibited the continued use of the CCTV system and stressed that any future surveillance must comply with GDPR principles.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal dataRead →
• Art. 6Lawfulness of processing6(1)(f)Read →
• Art. 7Conditions for consent7(4)Read →
• Art. 58PowersRead →

• Consent
• Data principles
• Unlawful processing