Luxembourg

Company

1,400 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2022-12-13.

Rank · Sector

#162

of 218 in Not assigned

Rank · Luxembourg

#28

of 34

Rank · All fines

#2,540

of 3,050

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2022-12-13
Controller / Processor: Company
Sector: Not assigned
Quoted Articles: Art. 12 (1) GDPR, Art. 13 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The DPA of Luxembourg has imposed a fine of EUR 1,400 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the processing of personal data, therefore violating Art. 13 GDPR.

Open original source Links to the regulator's original publication or another source.