Enforcement · National Commission for Data Protection (CNPD) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
LUXEMBOURG DPA: Insufficient involvement of data protection officer
How it connects
Related across sources
Case Law Rb. Den Haag - C/09/689833 Case Law VG München - M 26a K 25.5210 News CNIL (France) - SAN-2025-014 News CNIL (France) - SAN-2025-015 News VDAI (Litouwen) - Besluit nr. 3R-1700. Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH
Full text
The DPA of Luxembourg (CNPD) has imposed a fine of EUR 15,000 on a company. During an investigation, the DPA found that the controller had not sufficiently involved the data protection officer in all matters relating to the protection of personal data. In addition, the controller had not guaranteed sufficient autonomy for the data protection officer. Lastly, the data protection officer had not received sufficient training to be able to properly and independently advise and inform the controller.
Industry: Not assigned
Original document at the source cnpd.public.lu