- Enforcing jurisdiction
- Luxembourg · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Unknown – €2,600 Fine (Luxembourg, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A company in Luxembourg was fined for improperly using video surveillance that recorded employees during their breaks. This is important because it shows that companies must limit their surveillance to what is necessary and respect employees' privacy. Violating this can lead to financial penalties.
What happened
The company installed a video surveillance system that recorded employees in areas where it was not necessary.
Who was affected
The employees who were recorded during their breaks were affected.
What the authority found
The Luxembourg DPA found that the company violated data protection rules by not minimizing data collection and failing to inform employees about the surveillance.
Why this matters
This case highlights the need for companies to carefully consider their surveillance practices. Ensuring privacy and transparency is crucial to avoid penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA from Luxembourg (CNPD) has imposed a fine of EUR 2,600 on a company. The controller had installed a video surveillance system to protect the company's assets and prevent entry by unauthorized persons.However, the cameras also excessively captured parts of the canteen which serves as a break location for employees. The DPA finds that recording employees during their break is not necessary to ensure the purposes related to the video surveillance and was therefore disproportionate. The DPA finds that the controller has thus violated the principle of data minimization under Article 5 (1) c) GDPR. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform.
Related Enforcement Actions (6)
Other enforcement actions involving Unknown in LU
Fine
€3K
Details
Fine Date
12 May 2021
Authority
Commission Nationale pour la Protection des Données
Fine Amount
€2,600
About this data
Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu
Last updated: