Unknown – €5,300 Fine (Luxembourg, 2021)

€5,300Commission Nationale pour la Protection des Données6 October 2021Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in Luxembourg was fined for having too many surveillance cameras and not informing people properly about them. Some cameras even recorded public streets and private property, which wasn't necessary. This case is important because it shows that companies must limit surveillance and be clear about it.

What happened

The company installed 75 surveillance cameras, some of which recorded public and private areas unnecessarily.

Who was affected

Employees and individuals in the vicinity of the company's premises who were recorded by the cameras.

What the authority found

The Luxembourg DPA found the company violated GDPR by not minimizing data collection and failing to inform people about the surveillance.

Why this matters

This decision highlights the importance of data minimization and transparency in surveillance practices. Businesses should ensure they only collect necessary data and clearly inform people about it.

GDPR Articles Cited

Art. 13 GDPR
Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The DPA from Luxembourg has imposed a fine of EUR 5,300 on a company. The company had installed 75 surveillance cameras on its premises as well as tracking devices in some of its vehicles used by employees to travel to customers. A few of these cameras covered, among other things, parts of a public street and a private neighboring property. During its investigation, the DPA also found that the cameras covered the employee cafeteria, allowing employees to be monitored outside of their working hours. The DPA found this to be a violation of the principle of data minimization. It also found that the controller had not sufficiently complied with its information obligations under Art. 13 GDPR.

Related Enforcement Actions (8)

Other enforcement actions involving Unknown in LU

Current
Oct 2021

Fine

€5K

Details

Fine Date

6 October 2021

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€5,300

Enforcement Tracker ID

ETid-894

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: