Company – €1,000 Fine (Luxembourg, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in Luxembourg was fined EUR 1,400 for keeping location data from its vehicles for too long. The data protection authority found that the company didn't inform users properly about how their location data was being used. This is important because it shows that companies must limit data storage and be transparent with users about their data.
What happened
The Luxembourg DPA fined a company for storing location data from its cars for a year, which was deemed excessive.
Who was affected
Employees and users whose location data was collected and stored by the company's vehicles were affected.
What the authority found
The DPA decided that the company violated the principle of storage limitation and failed to inform users about data processing, breaching GDPR rules.
Why this matters
This ruling highlights the importance of data minimization and transparency. Companies should regularly review their data retention practices and ensure users are informed about data use.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The DPA of Luxembourg (CNPD) has imposed a fine of EUR 1,400 on a company. The controller had installed location sensors on a number of cars in its fleet. The purpose of this was to protect the company's assets, optimal fleet management and optimize the workflow, among other things. Some of the location data collected by the controller was stored for a year. The DPA states that this was clearly excessive and not necessary for the purposes of the processing. The DPA considered this to be a violation of the principle of storage limitation. In addition, the DPA found that the controller had not sufficiently informed the data subjects about the processing of the location data and had thus violated its information obligations pursuant to Art. 13 GDPR.
Related Enforcement Actions (8)
Other enforcement actions involving Company in LU
Fine
€1K
Details
Fine Date
30 June 2022
Authority
Commission Nationale pour la Protection des Données
Fine Amount
€1,000
Enforcement Tracker ID
ETid-1310
About this data
Cite as: Cookie Fines. Company - Luxembourg (2022). Retrieved from cookiefines.eu
Last updated: