Commission Nationale pour la Protection des Données
Data protection authority of Luxembourg
Total Actions
42
Total Fines
€1.2M
Average Fine
€37K
Among actions with fines
Enforcement Factor
1.30
Measured
About Commission Nationale pour la Protection des Données
The Commission Nationale pour la Protection des Données is Luxembourg's data protection authority responsible for enforcing GDPR and data-protection compliance. Commission Nationale pour la Protection des Données has taken 42 enforcement actions resulting in €1,175,400 in total penalties, with an average fine of €37K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.3), combining deterrent fines with corrective orders. Its most significant action was a €400,000 fine against Centro Hospitalar Barreiro Montijo, EPE in 2018. Key enforcement areas include third-party cookies without consent, cannot withdraw cookie consent, cookies placed before consent. The most frequently cited legal basis in Commission Nationale pour la Protection des Données's decisions is Art. 13(GDPR) and Art. 5(1) c) GDPR.
Largest Fines by Commission Nationale pour la Protection des Données
View all actionsRecent Actions by Commission Nationale pour la Protection des Données
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2017 | 1 | €0 |
| 2018 | 1 | €400K |
| 2019 | 1 | €107K |
| 2021 | 18 | €288K |
| 2022 | 9 | €191K |
| 2023 | 5 | €5K |
| 2024 | 4 | €2K |
| 2025 | 3 | €182K |
Most Enforced Violations
Frequently Asked Questions
How many GDPR and data-protection actions has Commission Nationale pour la Protection des Données issued?
Commission Nationale pour la Protection des Données has issued 42 enforcement actions related to GDPR and data-protection, totaling €1.2M.
What is Commission Nationale pour la Protection des Données's largest GDPR and data-protection fine?
The largest was a €400K fine against Centro Hospitalar Barreiro Montijo, EPE on 2018-10-09.
What violations does Commission Nationale pour la Protection des Données enforce most?
The most commonly enforced violations by Commission Nationale pour la Protection des Données are third-party cookies without consent, cannot withdraw cookie consent, cookies placed before consent.