CNPD (Portugal) - Deliberação 2019/207

CNPD - Deliberação 2019/207
Authority:	CNPD (Portugal)
Jurisdiction:	Portugal
Relevant Law:	Article 13(1) GDPR Article 13(2) GDPR
Type:	Complaint
Outcome:	Other Outcome
Started:
Decided:
Published:	19.03.2019
Fine:	2000 EUR
Parties:	n/a
National Case Number/Name:	Deliberação 2019/207
European Case Law Identifier:	Processo nº10212/2018
Appeal:	n/a
Original Language(s):	Portuguese
Original Source:	CNPD (in PT)
Initial Contributor:	Diana Oliveira

The Portuguese Data Protection Authority (CNPD) ruled that failing to post CCTV signage in monitored areas violates the controller's obligation to inform data subjects under Article 13 GDPR.

English Summary

Facts

The controller installed in its commercial establishment a video surveillance system (CCTV). During a routine inspection by the public police forces, it was noted that the mandatory CCTV signage was missing. The situation was reported to the Portuguese DPA (CNPD).

Holding

The Portuguese Data Protection Authority (CNPD) emphasized that the controller should have been aware of its obligation to display the necessary CCTV signage, failing to meet its transparency and information obligations under Article 13 GDPR. When determining the fine amount, the DPA noted that the controller promptly addressed the issue following the police inspection. However, the DPA highlighted that the controller did not inform the CNPD directly; instead, the matter was brought to the DPA's attention through a police complaint.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Portuguese original. Please refer to the Portuguese original for more details.