*** *** **** *** ******
********* ** ********** **** *******, ***** ****** ******** ******* *** ************ cameras ******* ****** ***** ***** *** entrance ** * ******* **** ** the ****** ******** ** ***** **, ****. (******* ***** are ****** ** ***** ** ****** and ******* ******* ** * ***** store/bar ***** ******* *** *** **** machines ** ***** ****.)
* **** *** ****** ***** *** transferred ** *** ******** **** ********** agency,*** ***, ***** *** **, ****, *** date *** **** *** *******. **** is ******* ***** ** *** ****, illegal ***** ************ ***** **** ******* by ***** ***********, *** *** ***, the ****** **** ****.
List ** **********
*** *** ****** **** *** ******* shop ********* **** ******** ******* **********:
- *** ******** ******* ******* ** *** shop’s ******** ********* * ****** ******* lot *** ******* *****, ********* ****** passing ** *** ********’ ******* ******.
- *** ******* **** *** ********** **** authorities.
- ***** ************ ******* *** **** *** an ********** **** ****** **** ** justification ********. (******** ******* *** ******** legal ************* *** *** ***** ************ storage ******* ****** **** ** *****.)
- ***** *** ** ****** **** ********** that ***** ************ *** ***** ****.
*** ******* **** *** ******* ** the *** **** *** **** **********, although *** ******* *** ******* ** was **** ** * *****.
GDPR ** ***-**** **********
*** ***** ********* – ******* ****** areas – *** *** **** ****** listed ** ********* *** ****, **** the *** ************ *** ******** ******** of *** ***:
- ******* *, ***** ****** **** *** ********** of ******** **** ** “******* ** **** ** ********* ** relation ** *** ******** *** ***** they *** *********”. *** *** ***** that *** ******* ****’* ********** *********** *** *** *******’ ******** purpose ** *********** *** ********.
- ******* *, ***** **** *** *** ********** for ****** **********, **** ** “*******” and “********** ********”. *** *** ***** that *** ******* ****’* ******* ********* none ** ***** **********.
*** ***** ***** ******* **** *** violations *********’* ******** ******* ***, ***** *** ****** ** ****.
*** ****** ****** *** **** ** non-GDPR ***** ** **** “*** ******** of *** ******* ******* ******** ****** 25 *** ****” *.*. *** **** the **** *** *******. ********* ********** 2, *, *** * **** ******* under ******** ******* *********** ***** *** first *** ******* ***** *** ****.
How *** ***** **** **********
*** *** **** *********, *** **** was ***** *,*** ***** ($*,***). *** other *****, ***-**** ********** ******** ***** of *** ***** **** ($***), ** laid *** ** ******** ******** ******* law. *** ***** ** ***** *** **** 4,800 ***** ($*,***). * **% ***** fee *** *****, ******** *** ***** to *,*** ***** ** $*,***.

(**********: “**** ** *****”, “******* ** case ***** *** *** *********”, “************ period”, “[*****] *********”)
GDPR ****** ****** *****
*** **** **** *** **** ********* was ***** *** *,*** ***** ***** the ***-**** ***** **** **** *** euros ** *** * ***********.
*** ***'* ****** **** ******* ******* confirmed ** **** (******** *****):
********* ********, *** **** ****** ****** its*** **(*) *** (*)significantly ****** **** concerning the determination of the total amount of an imposed fine in relation to prior legal provisions in force before the GDPR.
************, ******* **** ************* ********************* **** ***** **** ** ************ ** the **** ** *** ********; * small ******* **** ***** *** ** slapped **** *** ******* **** ****, which *** ***** ** ******* ***** or *% ** ****** ****** *******.
*** **** ** ** *************. *** example, * ****** **** * ******** who *** ** ****** ****** ** 40,000 ***** [$**,***] **** * **-*******-**** fine [$** *******].
Frequency ** ***** ************ ***** ** *******
**** ** *** *** ***** **** illegal ***** ************ ** ***** ** Austria. ******** ** *** *** ******* statistics, ******* **** **** **** ***** are * "****** **********", ****** *** after *** ****:
*** ******** ** *** ****** ***** concern *** ******** ******* *** ** CCTV.
Timing/Gravity ** *******
*** ****** ************* ** *** ******* shop ***** ** ***** **** *** the ***** **** ********* ** ********* 2018. *** **** *** ******** *** case *** *** *** ** *******’* federal *****, ***** *** *** ** rule ** **, *** *** ********* to ****.
*** *** **** ********* **** **** is *******’* ***** **** ****. *** months-long ***** ** **** ***** ***** from *** **** **** **** ********** are ***** ******* * ******* ** cases ***** ***** **** ****** *** GDPR’s *********.
*** *** ****** *** ****’* ******* to ** “*********” ****** “**********” ** “aggravating”. **** ** ******* *** ******* shop ****’* **** *** ******** ****** of **********, ******* *** ******* *** months-long ***** ************.
**********
**** **** ******** * ************ ************ example ** *** ***** *** ** higher ****** ** *** ****. * $*,*** **** *** * ****** small **** *** ** ***** * significant ******, *** ** ** ****** that *** ***** **** ***** **** been ****** *** *** *** ********** taken ***** ***** *** ****’* ********* on *** **.
**** ** ********* *** *****, ***********, and *** ****** ********** ***** ************ data ****** ****** **** ** ****.
Comments (34)
Donald Erickson
Good piece.
Create New Topic
Sean Nelson
01/29/19 03:32pm
A fine for "Filming Public Areas"???
"The cameras were not registered with authorities"
How Lame!
Create New Topic
Undisclosed Integrator #1
"Nanny State" at its best....
Create New Topic
Undisclosed #2
this implies that had the conduct only occurred after May 25 2018 that just the GDPR fine of $2,400 would have been levied; and conversely, had it only occurred before May 25 2018, that just the 3 $800 fines would have been imposed.
If this is so, why do you say that
when it they appear to both be $2400, just with the non-GDPR spread over three items, but both for the same conduct?
Create New Topic
Undisclosed End User #3
I have a LPR camera that covers all cars that drive by my offices, if people don't like it they drive another way. The cops loved the video when some teenagers smashed up one of our cars.
Create New Topic
Undisclosed Integrator #4
With the required camera registration, it just sounds like a way for the govt to have knowledge and access to all cameras with a view of the public without having to pay/install themselves. Or there is crooked dealings going on in the streets that the govt is wanting to hide.
Also, I would think a sign is unnecessary if the cameras are in plain view. Call me pessimistic if you want
Create New Topic
Undisclosed #5
I support strict enforcement of GDPR rules where they exist, and I advocate for compliant practices in areas where the laws do not exist. The encroachment of ubiquitous surveillance on everyday life is offensive in a notionally free country.
Create New Topic
Alf Katz
I'm really glad that we don't have such laws in Australia, where private cameras in shops that happen to film the footpath in front of the shops have been largely responsible for the apprehension of 2 rapist/murderers, and solving a number of other crimes. The police regularly call on private CCTV video.
We do have some other stupid laws around encryption though.
Create New Topic
Undisclosed End User #6
Informative article, please keep them coming as you learn about GDPR violations and fines. Also any knowledge of GDPR like privacy laws and fines in the United States and other countries.
reference:
Senate discusses a federal privacy law
States leading the way on privacy
Create New Topic
Michael Votaw
Another brilliant example of the government wasting time and resources. Do they really think that bad people doing bad things are going to comply with rules and regulations. I'm all for best practices, personal privacy and controlling my personal data, but people have to be realistic about what makes sense and rules are only for the ones that follow them.
Create New Topic
Charles Rollet
UPDATE: less than two weeks after this betting shop fine was issued, Austria's data protection authority imposed a $2,700 fine on a man for violating the GDPR after he installed security cameras in his apartment that filmed common areas in the complex.
On December 20, 2018, the Austrian DPA found that a man named Mr. Rudolf - his first name was not disclosed - installed 2 cameras (one at his doorway, the other at his window) that also filmed "areas of the property intended for general use" such as:
Rudolf also "published in social media" at least some of the footage and didn't put up a sign indicating the video surveillance.
The DPA found all this violated Articles 5 and 6 of the GDPR, just like the betting shop case, and fined Mr. Rudolf 2,420 euros or about $2,700:
The main takeaway from Rudolf's case: common areas in apartments like parking, walkways, etc are also considered "public"; to be GDPR compliant, residents can only film their own property.
Create New Topic
Charles Rollet
UPDATE: Fine Overturned Following Appeal
In April 2020, Austria's highest court overturned the fine based on a legal technicality unrelated to video surveillance. The high court determined that the DSB had not sufficiently tied the shop's illegal video surveillance to a specific person, i.e. the manager:
Below is a legal analysis of the high court's move from Austrian law firm Schima Mayer Starlinger:
Create New Topic