Unknown – €6,800 Fine (Luxembourg, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in Luxembourg was fined EUR 6,800 for improperly using video surveillance that captured employees and public areas without proper notice. The cameras were meant to protect assets but violated privacy rules by not minimizing data collection and failing to inform people about the surveillance. This case highlights the importance of transparency and data minimization in surveillance practices.
What happened
The company installed video cameras that captured employees and public areas without providing proper notice.
Who was affected
Employees and people in the public areas captured by the surveillance cameras were affected.
What the authority found
The Luxembourg DPA fined the company for not minimizing data collection and failing to inform individuals about the video surveillance.
Why this matters
This case emphasizes that businesses must ensure their surveillance practices comply with privacy laws by minimizing data collection and informing those affected. Companies should review their surveillance systems to avoid similar penalties.
GDPR Articles Cited
The DPA from Luxembourg (CNPD) has imposed a fine of EUR 6,800 on a company. The company had installed a video surveillance system to protect the company's assets, prevent intrusion by unauthorized persons and prevent accidents. However, the cameras also captured parts of an employee's work area, the smoking area that employees frequently used and parts of the public space. The DPA states that the controller thus violated the principle of data minimization under Art. 5 (1) c) of the GDPR. Furthermore, the DPA found a violation of the information obligations set out in Art. 13 GDPR, by not properly informing its employees and third parties about the video surveillance.
Related Enforcement Actions (8)
Other enforcement actions involving Unknown in LU
Fine
€7K
Details
Fine Date
1 December 2021
Authority
Commission Nationale pour la Protection des Données
Fine Amount
€6,800
Enforcement Tracker ID
ETid-1001
About this data
Cite as: Cookie Fines. Unknown - Luxembourg (2021). Retrieved from cookiefines.eu
Last updated: