CNPD - DELIBERAÇÃO/2019/222
|CNPD - DELIBERAÇÃO/2019/222|
|Relevant Law:||Article 13(1) GDPR|
Article 13(2) GDPR
|National Case Number/Name:||DELIBERAÇÃO/2019/222|
|European Case Law Identifier:||Processo n.º 10770/2018|
|Original Source:||CNPD (in PT)|
Portuguese DPA rules that not posting signage about CCTV footage collection in covered areas represents a breach of the controller's information duties under article 13 GDPR
English Summary[edit | edit source]
Facts[edit | edit source]
The controller had installed in its facilities a video surveillance system with 9 cameras and 1 recorder. During an inspection to the facilities by the public police forces, officers found that no signage warning passers-by about the functioning of such a system was posted. The situation was reported to the Portuguese DPA.
Dispute[edit | edit source]
Is posting signage about CCTV footage collection mandatory under the GDPR? And should it contain all elements from article 13 GDPR?
Holding[edit | edit source]
The Portuguese DPA stresses that the controller should have known that it was obliged to post the aforementioned signage and that such signage should have contained all elements from article 13 GDPR. When deciding on the amount of the fine, the Portuguese DPA considered that the controller fully cooperated with the police forces' and the CNPD's investigations.
Comment[edit | edit source]
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the Portuguese original. Please refer to the Portuguese original for more details.