Luxembourg

Unknown

12,500 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-06-29.

Rank · Sector

#50

of 218 in Not assigned

Rank · Luxembourg

of 34

Rank · All fines

#1,256

of 3,050

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-06-29
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 12,500 on a company. The company had installed a video surveillance system for the purpose of protecting company property, securing access to private and high-risk locations, and ensuring the safety of users and preventing accidents. However, the cameras also excessively captured parts of the public space and workplaces of employees. The DPA finds that the controller thus violated the principle of data minimization under Art. 5 (1) c) of the GDPR. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform.

Open original source Links to the regulator's original publication or another source.