GDPR: €40k fine for 11 weeks of workplace surveillance by small company

€40,000 for real estate company's excessive workplace surveillance. Continuous audio-video recording and work-from-home monitoring violated data protection principles.

Key points: A small local French real estate company was fined €40,000 by the CNIL for excessive workplace surveillance. Violations included continuous audio-video recording and intrusive work-from-home monitoring

Why this matters: This case highlights the pitfalls of not complying with GDPR regulations, even for small companies, particularly in employee monitoring practices. The company said the measures were only in place for 11 weeks and that it had told employees orally about the software and how it works and that employees could also manually track their working time instead without any negative consequences.

ADDITIONAL INFORMATION:

Case details in French