Company – €1,400 Fine (Luxembourg, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in Luxembourg was fined EUR 1,400 for keeping car location data longer than necessary and not informing people properly. The data was stored for a year, which was deemed excessive. This case reminds businesses to limit data storage and be transparent about data use.
What happened
The company stored location data from its fleet cars for a year, which was considered excessive.
Who was affected
Individuals whose location data was collected and stored by the company's fleet management system.
What the authority found
The Luxembourg DPA found the company violated GDPR by storing data excessively and failing to inform individuals about the data processing.
Why this matters
This case highlights the importance of adhering to data storage limits and transparency. Businesses should ensure they only keep data for as long as necessary and clearly inform individuals about data collection practices.
GDPR Articles Cited
The DPA of Luxembourg (CNPD) has imposed a fine of EUR 1,400 on a company. The controller had installed location sensors on a number of cars in its fleet. The purpose of this was to protect the company's assets, optimal fleet management and optimize the workflow, among other things. Some of the location data collected by the controller was stored for a year. The DPA states that this was clearly excessive and not necessary for the purposes of the processing. The DPA considered this to be a violation of the principle of storage limitation. In addition, the DPA found that the controller had not sufficiently informed the data subjects about the processing of the location data and had thus violated its information obligations pursuant to Art. 13 GDPR.
Related Enforcement Actions (6)
Other enforcement actions involving Company in LU
Fine
€1K
Details
Fine Date
30 June 2022
Authority
Commission Nationale pour la Protection des Données
Fine Amount
€1,400
Enforcement Tracker ID
ETid-1307
About this data
Cite as: Cookie Fines. Company - Luxembourg (2022). Retrieved from cookiefines.eu
Last updated: