Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 27 JUNE 2025

Data Privacy Updates (May 2025)

WH Partners
WH Partners
Contributor
WH Partners

WH Partners

We are a law firm with a strong focus on assisting businesses fuelling the digital economy. We have...

View firm profile
Explore more from WH Partners

The controller accessed the existing video surveillance system at one of its work points and illegally processed the image of its employees...

RomaniaPrivacy
Cosmina Maria Simion
Cosmina Maria Simion
Petrus Partene
Petrus Partene
Author LinkedIn connections

SANCTIONING PRACTICES

ANSPDCP (Romanian DPA)

CCTV system used for disciplinary sanctioning of employees – controller fined EUR 5,000

FACTS

The controller accessed the existing video surveillance system at one of its work points and illegally processed the image of its employees, including for the purpose of their disciplinary investigation, thus violating the principles of processing and the conditions of lawfulness of processing.

WHAT SHOULD YOU DO?

  • Do not use video surveillance systems for disciplinary purposes without a clear legal basis and prior notice. The processing of employees' images for the purpose of disciplinary investigation must be based on a distinct legal basis (e.g. well-founded legitimate interest) and must be expressly mentioned in the information provided to employees.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Same NPC, Different Rules: How A Player’s Age Changes Their Responsibilities Under The AI Act

The EU AI Act's Article 50 introduces age-dependent disclosure requirements for AI-powered NPCs in video games, creating a new compliance framework where the same generative character may require explicit labeling in one context but not another. This provision intersects with emerging consumer protection regulations and child safety standards, fundamentally changing how gaming studios must assess their AI implementations based on actual player demographics rather than abstract user models.
PolandTechnology
WH Partners
WH Partners
Article

EU AI Act: The Latest Compliance Checkpoint

The EU AI Act's transparency obligations became enforceable on 2 August 2026, requiring providers and deployers of AI systems to clearly disclose AI-generated content, inform users of AI interactions, and label deepfakes. Organizations must now navigate new compliance requirements including disclosure obligations for emotion recognition systems and content on matters of public interest, while facing potential fines of up to €15 million or 3% of global turnover for non-compliance.
European UnionTechnology
WH Partners
WH Partners
Article

EU Reaches Compromise On PSD3 And PSR: Tighter Harmonisation, Crypto Rules And Stronger Consumer Transparency.

The European Union has reached a compromise on the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR), introducing sweeping changes to harmonise payment rules across Member States. The package addresses fragmentation under PSD2 by migrating conduct-of-business rules into directly applicable regulations, while introducing new provisions on cash access, cryptocurrency payment services, fraud liability, and open banking.
European UnionTechnology
WH Partners
WH Partners