The Austrian Data Protection Authority (DSB) has issued the first fine for non-compliance with the GDPR. It comes as surprising to many that this fine was not issued against a giant company, but against an entrepreneur. The violation? The entrepreneur had installed CCTV camera in front of his company, but the camera also recorded a good part of the sidewalk. This was considered by the DSB as large-scale monitoring of public spaces, which is not permitted according to the GDPR. Furthermore, the camera was not properly marked, meaning the transparency obligation was not fulfilled.

The fine was however small, only 4,800 euros. The reason? The DSB aims for some proportionality, so that a company that only makes about 40,000 EUR per year will not be likely to get a 20 million euro fine.