VG Hannover - 10 A 5144/23
German court upholds reprimand for unlawful employee video surveillance.
A German court has upheld a reprimand against a food production facility for unlawfully surveilling employees. The company had installed cameras throughout its premises, including break rooms, parking lots, and production areas. The court found violations of GDPR principles regarding lawfulness, storage limitation, and record-keeping obligations.
AI summary of the linked source. Not reviewed by an editor. How this works
Run GDPR?
Get an email when a new story names GDPR, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA German administrative court confirmed regulatory action against a food production company that deployed cameras in sensitive areas — including break rooms and parking lots — without a lawful basis under GDPR. The violations spanned three core GDPR principles: lawfulness of processing, storage limitation, and inadequate record-keeping of processing activities. This case illustrates that physical surveillance systems are fully within scope of data protection law and cannot be deployed without documented legal justification. Organizations often overlook CCTV and physical monitoring when conducting privacy compliance reviews, creating significant regulatory exposure. The ruling serves as a reminder that employee monitoring requires proportionality, transparency, and formal documentation.