GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Sports betting company

Country
Austria
Fine
4,800 EUR
Date
2018-09-12
Sector
Public Sector
Articles
Art. 5 (1) a) and c)Art. 6 (1) GDPR; § 50b (1) and (2) and § 50d (1) DSG 2000 / § 13 (2), (3) and (5) DSG

Monetary fine becuase of lack of insufficient legal basis for data processing, lack of video surveillance indication and excessive storage duration

The video surveillance system covered public areas in front of the entrance of the sports betting company. The video surveillance system was not limited to the necessary extent. In addition, the storage period was unreasonably long and there was no logging of the processing operations related to video surveillance. Furthermore, the monitored area was not marked as video surveillance. Surveillance of the public area in this way, i.e. to a large extent by private persons, is not permitted. The controller has lodged an appeal against this decision with the Federal Administrative Court. Authority: Austrian DPA (Österreichische Datenschutzbehörde "DSB")

Additional information

UPDATE: The Federal Administrative Court has closed the proceedings.