LUXEMBOURG DPA: Non-compliance with general data processing principles
€5,300 fine - National Commission for Data Protection (CNPD)
Content
The DPA from Luxembourg has imposed a fine of EUR 5,300 on a company. The company had installed 75 surveillance cameras on its premises as well as tracking devices in some of its vehicles used by employees to travel to customers. A few of these cameras covered, among other things, parts of a public street and a private neighboring property. During its investigation, the DPA also found that the cameras covered the employee cafeteria, allowing employees to be monitored outside of their working hours. The DPA found this to be a violation of the principle of data minimization. It also found that the controller had not sufficiently complied with its information obligations under Art. 13 GDPR.
GDPR Articles: Art. 5 (1) c) GDPR, Art. 13 GDPR
Industry: Industry and Commerce