Enforcing jurisdiction
Luxembourg · Geography does not establish applicable law.
Confirmed applicable legislation

Unknown – €2,500 Fine (Luxembourg, 2023)

€2,500Commission Nationale pour la Protection des Données21 September 2023Luxembourg
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A controller in Luxembourg was fined for not informing employees about location tracking on their vehicles. This is important because it shows that companies must communicate clearly about data collection practices. The fine serves as a warning to others about the importance of transparency.

What happened

A controller was fined for failing to provide adequate information about location tracking systems used on service vehicles.

Who was affected

Employees whose movements were monitored by the location systems without proper information.

What the authority found

The authority imposed a fine for breaching data minimization principles and not informing employees about the tracking.

Why this matters

This case highlights the need for companies to inform employees about monitoring practices, reinforcing the importance of transparency in data handling.

Recorded legal citations
Automatically processed
Art. 13 GDPR
Art. 5(1)(b) GDPR
View original scraped data
Art. 5(1) b) GDPR
c) GDPR
Art. 13(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 15 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The DPA of Luxembourg has imposed a fine of EUR 2,500 on a controller. The controller had used location systems on his service vehicles and construction machinery. During its investigation, the DPA found that the controller had failed to provide its employees with sufficient information about the location systems. In addition, the DPA found a breach of the principle of data minimization, as the location system was also operated outside working hours and had no deactivation function, which meant that employees could be excessively monitored.

Details

Fine Date

21 September 2023

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€2,500

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: