[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGsfdxbdub7YVV8k5MjRR4zBBffD8qaaPZuMldbE24lE":3},{"article":4,"iocs":42,"watch_terms":43,"solutions":44,"lesson":47},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"e55601c9-572d-4a2b-919b-841c7617c13b","VG Hannover - 10 A 5144\u002F23","vg-hannover-10-a-5144-23-21a4d8","← Older revision Revision as of 12:53, 16 September 2026 Line 100: Line 100: }} }} A court upheld a reprimand issued to a doner kebab production facility for unlawful video surveillance of employees in both indoor and outdoor areas of the business premises, including staff break rooms. A court upheld a reprimand issued to a food production facility for unlawful video surveillance of employees in both indoor and outdoor areas of the business premises, including staff break rooms. == English Summary == == English Summary ==","A German court has upheld a reprimand against a food production facility for unlawfully surveilling employees. The company had installed cameras throughout its premises, including break rooms, parking lots, and production areas. The court found violations of GDPR principles regarding lawfulness, storage limitation, and record-keeping obligations.","German court upholds reprimand for unlawful employee video surveillance.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=VG_Hannover_-_10_A_5144\u002F23&diff=53105&oldid=53046","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-09-16T12:53:49+00:00","2026-09-16T14:00:11.014183+00:00",7,[17],{"name":18,"type":19},"GDPR","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,30,35,37],{"category":27},{"id":28,"icon":22,"name":18,"slug":29},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","gdpr",{"category":31},{"id":32,"icon":22,"name":33,"slug":34},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":36},{"id":20,"icon":22,"name":23,"slug":24},{"category":38},{"id":39,"icon":22,"name":40,"slug":41},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":45,"vendors":46},[],[],{"slug":48,"title":49,"body":50,"framework_refs":51,"framework_notes":64},"german-court-upholds-gdpr-reprimand-against-food-facility-for-unlawful-employee-surveillance","German Court Upholds GDPR Reprimand Against Food Facility for Unlawful Employee Surveillance","A German administrative court confirmed regulatory action against a food production company that deployed cameras in sensitive areas — including break rooms and parking lots — without a lawful basis under GDPR. The violations spanned three core GDPR principles: lawfulness of processing, storage limitation, and inadequate record-keeping of processing activities. This case illustrates that physical surveillance systems are fully within scope of data protection law and cannot be deployed without documented legal justification. Organizations often overlook CCTV and physical monitoring when conducting privacy compliance reviews, creating significant regulatory exposure. The ruling serves as a reminder that employee monitoring requires proportionality, transparency, and formal documentation.",[52,53,54,55,56,57,58,59,60,61,62,63],"GDPR Article 5 – Principles relating to processing of personal data","GDPR Article 6 – Lawfulness of processing","GDPR Article 13 – Transparency and information obligations","GDPR Article 30 – Records of processing activities","GDPR Article 35 – Data Protection Impact Assessment (DPIA)","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 IR-8 (Incident Response Plan)","NIST Privacy Framework PR.DS-P (Data Security – Privacy)","CIS Control 3 – Data Protection","CIS Control 14 – Security Awareness and Skills Training","ISO\u002FIEC 27001:2022 Annex A 5.15 – Access Control","ITIL Service Design – Information Security Management",{}]