GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Employer - UNIONTRAD COMPANY

Country
France
Fine
20,000 EUR
Date
2019-06-13
Sector
Business Sector
Articles
Art. 5 (1) c) GDPRArt. 12 GDPRArt. 13 GDPRArt. 32 GDPR

Poor legal basis for data processing

Between 2013 and 2017, the CNIL received complaints from several employees of a company filmed at their workplace. The CNIL drew the company's attention to the rules to be observed when installing cameras in the workplace, in particular that employees must not be constantly filmed and that information on data processing must be provided. No satisfactory measures were taken during the period stipulated. As a result, the CNIL conducted a second audit in October 2018, which confirmed that the employer continued to breach data protection laws when recording employees using video surveillance. In setting the amount of the fine, the CNLIN took into account the size (9 employees) and the financial situation of the company, which had a negative net result in 2017 (turnover of EUR 885,739 in 2017 and a negative net result of EUR 110,844), in order to retain a dissuasive but proportionate administrative penalty. Authority: French Data Protection Authority (CNIL)