ANSPDCP (Romania) - Fine against Kaufland România
| ANSPDCP (Romania) - Fine against Kaufland România | |
|---|---|
 | |
| Authority: | ANSPDCP (Romania) |
| Jurisdiction: | Romania |
| Relevant Law: | Article 15(3) GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | |
| Published: | 25.03.2022 |
| Fine: | 2000 EUR |
| Parties: | Kaufland România |
| National Case Number/Name: | Fine against Kaufland România |
| European Case Law Identifier: | n/a |
| Appeal: | Unknown |
| Original Language(s): | Romanian |
| Original Source: | ANSPDCP (in RO) |
| Initial Contributor: | Diana Rosu |
The Romanian DPA fined one of the biggest retail shops in Romania (Kaufland) approx € 2000 for not complying with a data subject access request.
English Summary
Facts
A data subject submitted an access request regarding their personal data included in video recordings captured through surveillance systems in one of the biggest retail shops in Romania. In reply to the request, the controller did not send the full copies with all the available recordings which captured personal data of the data subject.
Holding
As a result, the data subject filed a complaint with the Romanian Data Protection Authority (DPA) following which the DPA started an investigation against the controller.
The investigation found that the controller did not fully answer the data subject access request, in breach of GDPR Article 15(3) and consequently, the controller was fiend approx € 2000 (RON 98889,4). Additionally, the controller was required to comply with the corrective measure of answering the data subject request by giving access to copies of all the available recordings that included their personal data, blurring the personal data belonging to other individuals.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.
25.03.2022 Sanction for violating the RGPD The National Supervisory Authority completed in February 2022 an investigation at the operator Kaufland Romania SCS and found a violation of the provisions of art. 15 para. (3) of the General Data Protection Regulation on access rights. As such, the operator was sanctioned with a fine of 98889.4 lei (equivalent to 2000 EURO). The investigation was initiated following a complaint, and during the investigation, it was found that the operator Kaufland did not provide the petitioner with a copy of all the recordings in the video surveillance system, which is a violation of art. 15 para. (3) of the General Data Protection Regulation Thus, it was found that the operator did not send, at the request of the data subject, a full copy of the records concerning him from the store, although they were available at the time requested by him. At the same time, the corrective measure was applied to the operator to communicate to the person concerned all the images requested by him, insofar as they are available, with the blurring of the images that lead to the identification of other persons, according to art. 15 of the General Data Protection Regulation. Legal and Communication Department A.N.S.P.D.C.P.
