Enforcement · National Commission for Data Protection (CNPD) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Company: Insufficient fulfilment of information obligations
The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens.
Full text
The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the transfer of personal data to a third country or international organisation, therefore violating Art. 13 GDPR.
Industry: Not assigned
How it connects
References
Related across sources
C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) CJEU Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
Opinion 2/2021 EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries Adopted 1 EDPB - EDPS Joint Opinion 2 /2021 on the European Commission’s Implementing Decision on standard contractual clauses for the transfer of personal data to third countries… Opinion Jan 14, 2021 International Transfer Personal Data Processing Agreement
Opinion 25/2025 BOX Group — processor BCRs ·Opinion ·EDPB Oct 7, 2025 International Transfer Processors Codes of Conduct
Opinion 34/2023 Cerner Group — processor BCRs ·Opinion ·EDPB Dec 20, 2023 International Transfer Processors Codes of Conduct
2026 EDPB Document setting forth a Cooperation Procedure for the Authorisation of Contractual Clauses under Article 46(3)(a) GDPR and for the Adoption of Standard Contractual Clauses under Article 46(2)(d) GDPR EDPB, EDPB Document setting forth a Cooperation Procedure for the Authorisation of Contractual Clauses under Article 46(3)(a) GDPR and for the Adoption of Standard Contractual… Jan 22, 2026 International Transfer Access Controls Processing Agreement
Opinion 14/2019 draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR) Opinion ·EDPB Jul 12, 2019 International Transfer Controllers Processors