CNPD (Portugal) - Deliberação 2019/207
| CNPD - Deliberação 2019/207 | |
|---|---|
 | |
| Authority: | CNPD (Portugal) |
| Jurisdiction: | Portugal |
| Relevant Law: | Article 13(1) GDPR Article 13(2) GDPR |
| Type: | Complaint |
| Outcome: | Other Outcome |
| Started: | |
| Decided: | |
| Published: | 19.03.2019 |
| Fine: | 2000 EUR |
| Parties: | n/a |
| National Case Number/Name: | Deliberação 2019/207 |
| European Case Law Identifier: | Processo nº10212/2018 |
| Appeal: | n/a |
| Original Language(s): | Portuguese |
| Original Source: | CNPD (in PT) |
| Initial Contributor: | Diana Oliveira |
The Portuguese Data Protection Authority (DPA) ruled that failing to post CCTV signage in monitored areas violates the controller's obligation to inform data subjects under Article 13 GDPR.
English Summary
Facts
The controller installed in its commercial establishment a video surveillance system (CCTV). During a routine inspection by the public police forces, it was noted that the mandatory CCTV signage was missing. The situation was reported to the Portuguese DPA.
Holding
The Portuguese Data Protection Authority (CNPD) emphasized that the controller should have been aware of its obligation to post the necessary CCTV signage, failing to meet its transparency and information obligations under Article 13 GDPR. When determining the fine amount, the DPA noted that the controller promptly addressed the issue following the police inspection. However, the DPA highlighted that the controller did not inform the CNPD directly; instead, the matter was brought to the DPA's attention through a police complaint.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Portuguese original. Please refer to the Portuguese original for more details.
