Company – €700 Fine (Luxembourg, 2022)

€700Commission Nationale pour la Protection des Données13 December 2022Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in Luxembourg was fined EUR 700 for not clearly explaining how it uses people's data. The company failed to provide easy-to-understand information about data transfers to other countries. This fine reminds businesses to be transparent about data practices.

What happened

A company failed to provide clear and accessible information about its data processing activities and international data transfers.

Who was affected

Users of the company's online services were affected by the lack of clear information.

What the authority found

The Luxembourg DPA found that the company violated GDPR by not providing transparent and accessible information about data processing and transfers.

Why this matters

This fine emphasizes the need for companies to clearly communicate how they handle personal data, especially regarding international transfers. Transparency in data practices is crucial to comply with GDPR.

GDPR Articles Cited

Art. 12(1) GDPR
Art. 13(1)(f) GDPR
Full Legal Summary
Detailed

The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the transfer of personal data to a third country or international organisation, therefore violating Art. 13 GDPR.

Details

Fine Date

13 December 2022

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€700

Enforcement Tracker ID

ETid-1706

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Luxembourg (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: