Unknown – €1,500 Fine (Luxembourg, 2021)

€1,500Commission Nationale pour la Protection des Données9 November 2021Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in Luxembourg was fined EUR 1,500 for using a video surveillance system that captured too much information. The cameras not only monitored customers but also recorded parts of employees' work areas, which is against data protection rules. This case highlights the importance of only collecting necessary data.

What happened

The company installed a video surveillance system that recorded employees' work areas without justification.

Who was affected

Employees whose work areas were captured by the surveillance cameras were affected.

What the authority found

The authority found that the company violated the principle of data minimization by capturing unnecessary footage.

Why this matters

This ruling emphasizes that businesses must limit data collection to what is necessary. Companies should review their surveillance practices to ensure compliance with data protection rules.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 5(1)(c) GDPR
View original scraped data
Art. 5(1) c) GDPR
Art. 13(GDPR)

Original data from scraper before AI verification against source document.

Source verified 16 March 2026
verified correct
Full Legal Summary
Detailed

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,500 on a company. The company had installed a video surveillance system to ensure that their customers would not have to wait when their front desk staff was not present. However, the cameras also constantly captured parts of two employee's work areas. The DPA states that the controller thus violated the principle of data minimization under Art. 5 (1) c) of the GDPR. Furthermore, the DPA found a violation of the information obligations set out in Art. 13 GDPR, by not properly informing its employees and third parties about the video surveillance.

Related Enforcement Actions (13)

Other enforcement actions involving Unknown in LU

Current
Nov 2021

Fine

€2K

Details

Fine Date

9 November 2021

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€1,500

Enforcement Tracker ID

ETid-1003

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: