100.00€ penalty for photographing customers’ ID cards

Can they take a picture of your ID card?

The answer is NO.

The AEPD has recently sanctioned the Orange Company because it demanded in its deliveries that the delivery company captured an image of the DNI of the person receiving the package, otherwise the package could not be delivered.

According to the resolution of the AEPD, they are imposed a penalty amounting to €100,000 for violation of Article 5.1.c of the GDPR, which states that personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, known as the principle of data minimization.

The AEPD has dismissed the appeal for reconsideration filed by Orange and warns of the deadlines for enforcing the penalty.

This resolution puts an end to the administrative procedure. Orange has the possibility to file a contentious-administrative appeal.