CNPD (Portugal) - Deliberação 2019/222

CNPD - DELIBERAÇÃO/2019/222
Authority:	CNPD (Portugal)
Jurisdiction:	Portugal
Relevant Law:	Article 13(1) GDPR Article 13(2) GDPR
Type:	Investigation
Outcome:	Violation Found
Started:
Decided:	25.03.2019
Published:	25.03.2019
Fine:	2000 EUR
Parties:	n/a
National Case Number/Name:	DELIBERAÇÃO/2019/222
European Case Law Identifier:	Processo n.º 10770/2018
Appeal:	Unknown
Original Language(s):	Portuguese
Original Source:	CNPD (in PT)
Initial Contributor:	n/a

Portuguese DPA rules that not posting signage about CCTV footage collection in covered areas represents a breach of the controller's information duties under article 13 GDPR

English Summary

Facts

The controller had installed in its facilities a video surveillance system with 9 cameras and 1 recorder. During an inspection to the facilities by the public police forces, officers found that no signage warning passers-by about the functioning of such a system was posted. The situation was reported to the Portuguese DPA.

Dispute

Is posting signage about CCTV footage collection mandatory under the GDPR? And should it contain all elements from article 13 GDPR?

Holding

The Portuguese DPA stresses that the controller should have known that it was obliged to post the aforementioned signage and that such signage should have contained all elements from article 13 GDPR. When deciding on the amount of the fine, the Portuguese DPA considered that the controller fully cooperated with the police forces' and the CNPD's investigations.

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Portuguese original. Please refer to the Portuguese original for more details.