GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

S.C. TIP TOP FOOD INDUSTRY S.R.L.

Country
Romania
Fine
5,000 EUR
Date
15.04.21(15.04.21)
Sector
Private Sector
Articles
Article 5 (1), b) and c), (2)Article 6 andArticle 7

Infringement of purpose limitation and accuracy principles regarding the processing of personal data, Lack of legal basis for data processing, Non-observance of the conditions for consent

The controller has excessively processed personal data of its employees through video surveillance cameras installed in the areas designated as locker rooms and spaces for serving the meal. The supervisory authority concluded that such data processing was carried out by the controller with non-observance of data minimisation principle, the purpose of data processing declared by the controller (i.e. protecting the goods of controller, discouraging theft) could be achieved by using less intrusive means for the privacy of employees, and that the consent of employees cannot be deemed to be freely given considering the subordination nature of the employer-employee relationship.