Enforcement
EN LUXEMBOURG DPA: Insufficient involvement of data protection officer
€13,200 fine - National Commission for Data Protection (CNPD)
Content
The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters relating to the protection of personal data. Second, the controller did not have a data protection control plan in place to demonstrate that the data protection officer was adequately performing its tasks.
GDPR Articles: Art. 38 (1) GDPR, Art. 39 (1) b) GDPR
Industry: Not assigned