Unknown – €2,600 Fine (Luxembourg, 2021)

€2,600Commission Nationale pour la Protection des Données12 May 2021Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Another company in Luxembourg was fined EUR 2,600 for using video cameras that recorded employees during their breaks. This is important because it shows that companies can't just record everything; they must respect employees' privacy. It also highlights the need to inform employees about how their data is being used.

What happened

The company installed a video surveillance system that recorded employees in the canteen during their breaks.

Who was affected

Employees who were recorded during their breaks were affected by this surveillance.

What the authority found

The data protection authority found that the company violated the principle of data minimization and failed to properly inform employees about the data processing.

Why this matters

This ruling signals that companies must carefully consider the necessity of surveillance and ensure transparency with employees. It sets a precedent for protecting employee privacy in workplace surveillance.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 5(1)(c) GDPR
View original scraped data
Art. 5(1) c) GDPR
Art. 13(GDPR)

Original data from scraper before AI verification against source document.

Source verified 15 March 2026
verified correct
Full Legal Summary
Detailed

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 2,600 on a company. The controller had installed a video surveillance system to protect the company's assets and prevent entry by unauthorized persons.However, the cameras also excessively captured parts of the canteen which serves as a break location for employees. The DPA finds that recording employees during their break is not necessary to ensure the purposes related to the video surveillance and was therefore disproportionate. The DPA finds that the controller has thus violated the principle of data minimization under Article 5 (1) c) GDPR. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform.

Related Enforcement Actions (13)

Other enforcement actions involving Unknown in LU

Current
May 2021

Fine

€3K

Details

Fine Date

12 May 2021

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€2,600

Enforcement Tracker ID

ETid-713

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: