Volkswagen – €1,100,000 Fine (Germany, 2022)

€1,100,000Bundesbeauftragter für den Datenschutz26 July 2022Germany
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Volkswagen was fined EUR 1.1 million for not informing people about data collection through cameras on a test vehicle. They also failed to have proper agreements and assessments in place for data protection. This case emphasizes the importance of transparency and proper data protection measures when using surveillance technology.

What happened

Volkswagen used cameras on a test vehicle without informing people about the data collection.

Who was affected

Individuals whose activities were recorded by the cameras on Volkswagen's test vehicle.

What the authority found

The DPA fined Volkswagen for failing to inform people about data processing and not having necessary data protection agreements and assessments.

Why this matters

This case serves as a warning to companies using surveillance technology to ensure they inform people about data collection and have proper data protection measures in place. It highlights the need for transparency and compliance with GDPR.

GDPR Articles Cited

AI-verified

Art. 13 GDPR
Art. 28 GDPR
Art. 30 GDPR
Art. 35 GDPR
View original scraped data
Art. 13 GDPR
Art. 28 GDPR
Art. 30 GDPR
Art. 35 GDPR

Original data from scraper before AI verification against source document.

Source verified 5 March 2026
articles corrected
authority corrected
Full Legal Summary
Detailed

The DPA of Lower Saxony has imposed a fine of EUR 1. 1 million on Volkswagen. The company had installed cameras on a test vehicle. The vehicle was being used to test and train the functionality of a driving assistance system to prevent traffic accidents. For this purpose, the traffic around the vehicle was recorded with the cameras. However, Volkswagen failed to provide information in accordance with Art. 13 GDPR about the data processing by the cameras attached to the vehicle. The DPA further found that, contrary to its obligation under Art. 28 GDPR, Volkswagen had not concluded a processing agreement with the company that carried out the journeys. Also, no data protection impact assessment pursuant to Art. 35 DSGVO had been carried out and the technical and organizational protection measures had not been outlined in the list of processing activities. Volkswagen has cooperated extensively with the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for Volkswagen in DE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 July 2022

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€1,100,000

Enforcement Tracker ID

ETid-1305

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Volkswagen - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: