Unknown – €15,000 Fine (Luxembourg, 2021)

€15,000Commission Nationale pour la Protection des Données11 June 2021Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Luxembourg company was fined €15,000 for not properly involving its data protection officer in important decisions. The authority found that the officer lacked independence and training, which is crucial for protecting personal data. This case emphasizes the need for companies to empower their data protection officers.

What happened

The company failed to sufficiently involve its data protection officer in matters related to personal data protection.

Who was affected

The company's employees and anyone whose data is handled by the company were affected by this lack of oversight.

What the authority found

The authority decided that the company did not comply with GDPR requirements regarding the role and training of the data protection officer.

Why this matters

This case highlights the importance of having a well-supported data protection officer. Companies should ensure their officers are trained and involved in data protection matters to avoid penalties.

GDPR Articles Cited

AI-verified

View original scraped data
Art. 38(1) GDPR
(3) GDPR
Art. 39(1) a) GDPR
b) GDPR

Original data from scraper before AI verification against source document.

Source verified 13 March 2026
articles corrected
Full Legal Summary
Detailed

The DPA of Luxembourg (CNPD) has imposed a fine of EUR 15,000 on a company. During an investigation, the DPA found that the controller had not sufficiently involved the data protection officer in all matters relating to the protection of personal data. In addition, the controller had not guaranteed sufficient autonomy for the data protection officer. Lastly, the data protection officer had not received sufficient training to be able to properly and independently advise and inform the controller.

Related Enforcement Actions (13)

Other enforcement actions involving Unknown in LU

Current
Jun 2021

Fine

€15K

Details

Fine Date

11 June 2021

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€15,000

Enforcement Tracker ID

ETid-753

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: