Luxembourg

Road transport company

1,280 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2025-12-16.

Rank · Sector

#169

of 183 in Transportation and Energy

Rank · Luxembourg

#32

of 38

Rank · All fines

#2,731

of 3,267

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2025-12-16
Controller / Processor: Road transport company
Sector: Transportation and Energy
Quoted Articles: Art. 30 (1) a), c), d), f), g) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA of Luxembourg has imposed a fine of EUR 1,280 on a road transport company. The company’s record of processing activities was incomplete and partly inaccurate. It lacked information such as the identity of the controller, descriptions of data subjects, erasure periods and security measures. However, the company had corrected the record before receiving the statement of objections, so the DPA took no further action.

Open original source Links to the regulator's original publication or another source.