VG Hannover - 10 A 5144/23
German court upholds fine for unlawful employee surveillance under GDPR.
A German court has upheld a reprimand and an €8,000 fine against a doner kebab production facility for unlawful video surveillance of its employees. The court found that the company violated several GDPR articles, including those related to lawfulness of processing and consent, as there was no legal basis for the comprehensive surveillance. The court also ruled that issuing both a reprimand and a fine for the same violations did not constitute double punishment.
AI summary of the linked source. Not reviewed by an editor. How this works
Run video surveillance?
Get an email when a new story names video surveillance, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA doner kebab production facility in Germany was fined €8,000 and formally reprimanded after conducting comprehensive video surveillance of employees without a valid legal basis under the GDPR. The core failure was the absence of a lawful processing ground — such as legitimate interest proportionately balanced against employee privacy rights, or a valid collective agreement — before deploying surveillance systems. This case illustrates that workplace monitoring is not inherently permissible and requires careful legal justification, documented purpose limitation, and data minimisation. Regulators are actively enforcing employee privacy rights, and organisations that treat surveillance as a default operational tool face significant financial and reputational consequences.