Company – €2,300 Fine (Luxembourg, 2024)

€2,300Commission Nationale pour la Protection des Données20 November 2024Luxembourg
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in Luxembourg was fined EUR 2,300 for improperly installing video surveillance in its store. The surveillance setup did not follow legal guidelines and failed to inform customers about how their data was being processed. This case serves as a reminder for businesses to comply with data protection rules when using surveillance.

What happened

A company installed video surveillance that violated data protection principles.

Who was affected

Customers and visitors to the store who were recorded by the surveillance cameras.

What the authority found

The Luxembourg DPA determined that the company did not comply with data protection laws regarding video surveillance and customer information.

Why this matters

This ruling highlights the importance of following data protection laws when using surveillance. Businesses should ensure they inform customers about data collection and implement necessary security measures.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Art. 13(1) GDPR
Art. 25(2) GDPR
Art. 32(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
e)
(2) GDPR
Art. 6(1) GDPR
Art. 13(1) GDPR
Art. 25(2) GDPR
Art. 32(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 16 March 2026
verified correct
Full Legal Summary
Detailed

The DPA of Luxembourg has issued a fine of EUR 2,300 on a company, that is active in the retail sale of telecommunication equipement in specialised stores. The controller had installed video surveillance on the property. The video surveillance was installed in a way, that partly infringed the prinicple of legality and the principle of data minimisation. The controller also failed to adequately inform data subjects regarding the data processing and failed to implement adequate technical and organisational measures to ensure data security.

Related Enforcement Actions (8)

Other enforcement actions involving Company in LU

Current
Nov 2024

Fine

€2K

Details

Fine Date

20 November 2024

Authority

Commission Nationale pour la Protection des Données

Fine Amount

€2,300

Enforcement Tracker ID

ETid-2762

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Luxembourg (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: