DPA case CNPD 21FR/2021 – €7,600 Fine (Luxembourg, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An anonymised Luxembourg company was fined EUR 7,600 because CCTV captured more than was necessary, including employees at their workstations and parts of the public road, and people received incomplete privacy information. The company had adjusted or disabled the disputed cameras; the CNPD still ordered complete information within two months.
What happened
CCTV coverage extended to workstations and the public road, and the notices for employees and other people omitted required information.
Who was affected
Employees and visitors of the company were affected by the lack of information regarding CCTV monitoring.
What the authority found
The Commission Nationale pour la Protection des Données found that the company violated GDPR Articles 5(1)(c) and 13 by not providing sufficient information.
Why this matters
This ruling emphasizes the need for businesses to balance security measures with privacy rights. Companies should ensure they inform people about surveillance practices to comply with data protection laws.
Source checks
Secondary-source text retrieved.
No automated check recorded.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
CNPD decision 21FR/2021 of 11 June 2021 imposed a EUR 7,600 fine on anonymised Company A for excessive CCTV coverage and inadequate information, infringing GDPR Articles 5(1)(c) and 13. The CNPD also ordered complete information for employees and visitors within two months. This is distinct from decision 22FR/2021, which imposed EUR 7,200 on the same date.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case CNPD 21FR/2021 in LU
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
11 June 2021
Authority
Commission Nationale pour la Protection des Données
Fine Amount
€7,600
GDPRhub ID
gdprhub-3619About this data
Cite as: Cookie Fines. DPA case CNPD 21FR/2021 - Luxembourg (2021). Retrieved from cookiefines.eu
Last updated: