Spain: AEPD fines Casa Gracio Operation €6,000 for unlawful use of CCTV cameras
The Spanish data protection authority ('AEPD') issued, on 25 February 2020, a resolution ('the Resolution') in proceedings PS/00369/2019, fining Casa Gracio Operation, SLU €6,000 for the unlawful use of CCTV cameras, violating Article 5(1)(c) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the AEPD held that the CCTV cameras in question were established in the premises of a hotel but captured images of public roads outside the hotel. Moreover, the AEPD found that the amount of information captured by the CCTV cameras was not adequate, relevant and limited to what is necessary in relation to the purposes for which they were processed.
You can read the Resolution, only available in Spanish, here.