Luxembourg

Unknown

7,600 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-06-11.

Rank · Sector

#108

of 213 in Employment

Rank · Luxembourg

#11

of 34

Rank · All fines

#1,530

of 3,042

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-06-11
Controller / Processor: Unknown
Sector: Employment
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 7,600 on a company. This company had installed a video surveillance system for the purpose of protecting the company's assets, preventing intrusion by unauthorized persons and preventing accidents. However, two of the cameras also covered parts of a public street and six of the cameras covered the workplaces of some employees
The DPA states that the recording of the employees and the public street was not necessary to ensure the purposes associated with the video surveillance and was therefore disproportionate. The DPA finds that the controller thus breached the principle of data minimization under Article 5(1)(c) of the GDPR.
In addition, the DPA found that the controller had not complied with its information obligations under Article 13 GDPR.

Open original source Links to the regulator's original publication or another source.