On 22 February 2022, the Romanian DPA announced imposing fines amounting to EUR 3,000 against a construction company for failing to adequately inform its employees on the video surveillance conducted in the workplace and for failing to respond to a former employee’s request for exercising their right to object.
The investigation was launched following the receipt of a complaint from a former employee claiming the said company continued to process their personal data after the employment contract was terminated, despite an objection request having been filed.
During the investigation, the Romanian DPA concluded that the company failed to demonstrate the prior information of its employees on the processing of personal data by means of video surveillance installed in the workplace. Further, the Romanian DPA found that the complainant’s objection request was not answered within the legal deadline.
In addition to the fines, the Romanian DPA imposed the following corrective measures, ordering the controller:
- to comply with the transparency principle by ensuring that data subjects, in particular the controller’s employees, are adequately informed regarding video surveillance;
- to send a response to the former employee’s request, including the measures taken after exercising the right to object.
This is not the first time that the Romanian DPA has imposed sanctions for failure to adequately provide information on video surveillance. Until now, from what is publicly known, the sanctions for non-compliance in this field vary from warning to EUR 1,000. Likewise, this is not the first time that the Romanian DPA has imposed sanctions for failure to comply with data subjects’ right to object. Until now, from what is publicly known, the sanctions for non-compliance in this field vary from warning to EUR 3,000.
The press release is available here (only in Romanian).
