Luxembourg

Unknown

1,900 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-05-12.

Rank · Sector

#154

of 218 in Not assigned

Rank · Luxembourg

#24

of 34

Rank · All fines

#2,438

of 3,050

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-05-12
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 5 (1) c), e) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,900 on a company. The controller had installed a video surveillance system to protect the company's assets and prevent entry by unauthorized persons. However, the cameras also excessively captured parts of the public space. The DPA finds that the controller thus violated the principle of data minimization under Article 5 (1) c) GDPR. In addition, the DPA finds that the controller stored the recordings longer than legally permitted and thus violated Art. 5 (1) e) GDPR.

Open original source Links to the regulator's original publication or another source.