CNPD (Portugal) - Deliberação 2019/222
| CNPD - DELIBERAÇÃO/2019/222 | |
|---|---|
 | |
| Authority: | CNPD (Portugal) |
| Jurisdiction: | Portugal |
| Relevant Law: | Article 13(1) GDPR Article 13(2) GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | 25.03.2019 |
| Published: | 25.03.2019 |
| Fine: | 2000 EUR |
| Parties: | n/a |
| National Case Number/Name: | DELIBERAÇÃO/2019/222 |
| European Case Law Identifier: | Processo n.º 10770/2018 |
| Appeal: | Unknown |
| Original Language(s): | Portuguese |
| Original Source: | CNPD (in PT) |
| Initial Contributor: | n/a |
Portuguese DPA rules that not posting signage about CCTV footage collection in covered areas represents a breach of the controller's information duties under article 13 GDPR
English Summary
Facts
The controller had installed in its facilities a video surveillance system with 9 cameras and 1 recorder. During an inspection to the facilities by the public police forces, officers found that no signage warning passers-by about the functioning of such a system was posted. The situation was reported to the Portuguese DPA.
Dispute
Is posting signage about CCTV footage collection mandatory under the GDPR? And should it contain all elements from article 13 GDPR?
Holding
The Portuguese DPA stresses that the controller should have known that it was obliged to post the aforementioned signage and that such signage should have contained all elements from article 13 GDPR. When deciding on the amount of the fine, the Portuguese DPA considered that the controller fully cooperated with the police forces' and the CNPD's investigations.
Comment
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Portuguese original. Please refer to the Portuguese original for more details.
