Luxembourg

Unknown

5,300 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-10-06.

Rank · Sector

#279

of 597 in Industry and Commerce

Rank · Luxembourg

#15

of 34

Rank · All fines

#1,679

of 3,050

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-10-06
Controller / Processor: Unknown
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA from Luxembourg has imposed a fine of EUR 5,300 on a company. The company had installed 75 surveillance cameras on its premises as well as tracking devices in some of its vehicles used by employees to travel to customers. A few of these cameras covered, among other things, parts of a public street and a private neighboring property. During its investigation, the DPA also found that the cameras covered the employee cafeteria, allowing employees to be monitored outside of their working hours. The DPA found this to be a violation of the principle of data minimization. It also found that the controller had not sufficiently complied with its information obligations under Art. 13 GDPR.

Open original source Links to the regulator's original publication or another source.