Luxembourg

Unknown

1,500 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-11-09.

Rank · Sector

#191

of 213 in Employment

Rank · Luxembourg

#25

of 34

Rank · All fines

#2,500

of 3,050

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-11-09
Controller / Processor: Unknown
Sector: Employment
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,500 on a company. The company had installed a video surveillance system to ensure that their customers would not have to wait when their front desk staff was not present.
However, the cameras also constantly captured parts of two employee's work areas. The DPA states that the controller thus violated the principle of data minimization under Art. 5 (1) c) of the GDPR. Furthermore, the DPA found a violation of the information obligations set out in Art. 13 GDPR, by not properly informing its employees and third parties about the video surveillance.

Open original source Links to the regulator's original publication or another source.