Café owner – €1,000 Fine (Luxembourg, 2022)

€1,000Commission Nationale pour la Protection des Données2 February 2022Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A café owner in Luxembourg was fined EUR 1,000 for using security cameras that recorded employees' work areas without proper notice. This violated privacy rules because the cameras captured more than necessary and the owner didn't inform employees about the surveillance.

What happened

The café owner installed cameras that recorded employees' work areas without providing adequate information about the surveillance.

Who was affected

Employees working in the café whose activities were recorded by the surveillance cameras.

What the authority found

The Luxembourg Data Protection Authority found that the café owner violated privacy rules by not minimizing data collection and failing to inform employees about the surveillance.

Why this matters

This case underscores the need for businesses to limit surveillance to what's necessary and to clearly inform employees about any monitoring. It serves as a warning to ensure transparency and respect for privacy in the workplace.

GDPR Articles Cited

Art. 13(GDPR)
Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The DPA from Luxembourg has imposed a fine of EUR 1,000 on a café owner. The owner had installed two video surveillance cameras in the café for the purpose of protecting company assets and the safety of customers and employees. Those cameras, however, constantly captured parts of the employee's work areas. The DPA found this to be a violation of the principle of data minimization. It also found that the owner had not sufficiently complied with its information obligations under Art. 13 GDPR.

Related Enforcement Actions (0)

No other enforcement actions found for Café owner in LU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 February 2022

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€1,000

Enforcement Tracker ID

ETid-1167

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Café owner - Luxembourg (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: