Luxembourg

Unknown

1,000 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-05-12.

Rank · Sector

#171

of 218 in Not assigned

Rank · Luxembourg

#29

of 34

Rank · All fines

#2,597

of 3,042

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-05-12
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,000 on a company. The controller had installed a video surveillance system with the purposes of the protection of property, securing access to private and risky places, as well as the safety of users and the prevention of accidents. However, the cameras also excessively captured parts of the public space. The DPA finds that the controller thus violated the principle of data minimization under Article 5 (1) c) GDPR. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform.

Open original source Links to the regulator's original publication or another source.