Luxembourg

Unknown

13,200 €

GDPR enforcement action by National Commission for Data Protection (CNPD) on 2021-10-13.

Rank · Sector

#47

of 218 in Not assigned

Rank · Luxembourg

of 34

Rank · All fines

#1,246

of 3,050

Case details

Authority: National Commission for Data Protection (CNPD)
Date: 2021-10-13
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 38 (1) GDPR, Art. 39 (1) b) GDPR
Type of violation: Insufficient involvement of data protection officer

Summary

The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters relating to the protection of personal data. Second, the controller did not have a data protection control plan in place to demonstrate that the data protection officer was adequately performing its tasks.

Open original source Links to the regulator's original publication or another source.