Enforcement
EN Company: Insufficient fulfilment of information obligations
€700 fine - National Commission for Data Protection (CNPD)
Content
The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the transfer of personal data to a third country or international organisation, therefore violating Art. 13 GDPR.
GDPR Articles: Art. 12 (1) GDPR, Art. 13 (1) f) GDPR
Industry: Not assigned