Unknown – €12,500 Fine (Luxembourg, 2021)

€12,500Commission Nationale pour la Protection des Données29 June 2021Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in Luxembourg was fined €12,500 for using security cameras that captured too much public and employee space. They also failed to inform people about the surveillance. This violated GDPR rules about data minimization and transparency.

What happened

A company installed surveillance cameras that captured excessive footage of public spaces and employee areas without proper notice.

Who was affected

People in public spaces and employees who were recorded by the company's surveillance cameras.

What the authority found

The Luxembourg data protection authority fined the company for not minimizing data collection and failing to inform people about the surveillance.

Why this matters

This case emphasizes the need for businesses to limit surveillance to necessary areas and to clearly inform individuals about data collection. Companies should ensure their security measures comply with privacy laws.

GDPR Articles Cited

Art. 13 GDPR
Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The DPA from Luxembourg (CNPD) has imposed a fine of EUR 12,500 on a company. The company had installed a video surveillance system for the purpose of protecting company property, securing access to private and high-risk locations, and ensuring the safety of users and preventing accidents. However, the cameras also excessively captured parts of the public space and workplaces of employees. The DPA finds that the controller thus violated the principle of data minimization under Art. 5 (1) c) of the GDPR. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform.

Related Enforcement Actions (8)

Other enforcement actions involving Unknown in LU

Current
Jun 2021

Fine

€13K

Details

Fine Date

29 June 2021

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€12,500

Enforcement Tracker ID

ETid-760

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: