Company – €1,400 Fine (Luxembourg, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in Luxembourg was fined for storing location data longer than necessary and not informing users properly. This matters because it shows that businesses must limit data storage and be transparent with users about how their data is used. It encourages companies to review their data practices.
What happened
The DPA of Luxembourg fined the company for excessive storage of location data collected from its fleet of cars.
Who was affected
Employees and users whose location data was collected and stored by the company were affected.
What the authority found
The DPA found that the company violated GDPR by not limiting data storage and failing to adequately inform users about data processing.
Why this matters
This ruling highlights the importance of data minimization and transparency in data practices. Companies should regularly assess their data retention policies.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The DPA of Luxembourg (CNPD) has imposed a fine of EUR 1,400 on a company. The controller had installed location sensors on a number of cars in its fleet. The purpose of this was to protect the company's assets, optimal fleet management and optimize the workflow, among other things. Some of the location data collected by the controller was stored for a year. The DPA states that this was clearly excessive and not necessary for the purposes of the processing. The DPA considered this to be a violation of the principle of storage limitation. In addition, the DPA found that the controller had not sufficiently informed the data subjects about the processing of the location data and had thus violated its information obligations pursuant to Art. 13 GDPR.
Related Enforcement Actions (8)
Other enforcement actions involving Company in LU
Fine
€1K
Details
Fine Date
30 June 2022
Authority
Commission Nationale pour la Protection des Données
Fine Amount
€1,400
Enforcement Tracker ID
ETid-1307
About this data
Cite as: Cookie Fines. Company - Luxembourg (2022). Retrieved from cookiefines.eu
Last updated: