Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento

What happened

The Italian DPA has imposed a fine of EUR 8,000 on Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento. Following a press report, the authority discovered that CCTV cameras had been installed in the changing rooms of a swimming facility managed by the controller. Although the controller stated that signs had been installed to inform people about the cameras, processing personal data in this way is unlawful due to the excessive and intrusive breach of dignity and privacy involved. Although the signage informed people about the existence of the CCTV system, it did not inform data subjects adequately about the processing of their data. Furthermore, the retention period for the footage (72 hours) was deemed too long; the controller had not conducted an assessment regarding the necessary retention period for the purpose of processing.

Summary from the CMS Enforcement Tracker, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →

• Transparency
• Unlawful processing