Unknown – €2,500 Fine (Luxembourg, 2023)

€2,500Commission Nationale pour la Protection des Données21 September 2023Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Luxembourg company was fined EUR 2,500 for not informing its employees about the location tracking on their service vehicles. The investigation revealed that the tracking system monitored employees even outside of work hours without a way to turn it off. This case highlights the importance of transparency and minimizing data collection in the workplace.

What happened

The company used location tracking systems on its vehicles but failed to inform employees about it.

Who was affected

Employees whose movements were tracked by the company's location systems.

What the authority found

The authority found that the company did not provide sufficient information to employees and violated data minimization principles.

Why this matters

This ruling emphasizes that companies must be clear about how they monitor employees and limit data collection to what is necessary. Businesses should review their tracking practices to ensure they respect employee privacy.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 5(1)(b) GDPR
View original scraped data
Art. 5(1) b) GDPR
c) GDPR
Art. 13(GDPR)

Original data from scraper before AI verification against source document.

Source verified 15 March 2026
articles corrected
Full Legal Summary
Detailed

The DPA of Luxembourg has imposed a fine of EUR 2,500 on a controller. The controller had used location systems on his service vehicles and construction machinery. During its investigation, the DPA found that the controller had failed to provide its employees with sufficient information about the location systems. In addition, the DPA found a breach of the principle of data minimization, as the location system was also operated outside working hours and had no deactivation function, which meant that employees could be excessively monitored.

Related Enforcement Actions (13)

Other enforcement actions involving Unknown in LU

Current
Sept 2023

Fine

€3K

Details

Fine Date

21 September 2023

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€2,500

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: