Details:

Summary The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 9,600 on the waxing salon operator of Waxing Palace AS. The controller had camera surveillance of the controller’s reception area. The DPA found that the controller had no legal basis for the camera surveillance, as well as had not provided sufficient information about it. The camera surveillance concerned both employees and customers.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 9,600
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law