# Company: Insufficient fulfilment of information obligations

- Type: Enforcement
- Source: National Commission for Data Protection (CNPD)
- Date: 2022-12-13
- Original: https://www.enforcementtracker.com/ETid-1707
- Canonical: https://overview.legal/posts/47822
- Topics: Personal Data, Controllers, Processing, Processing Agreement, Law Enforcement, Data Controller, Supervisory Authorities

## Summary

The DPA of Luxembourg has imposed a fine of EUR 1,400 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the processing of personal data, therefore

## Full text

The DPA of Luxembourg has imposed a fine of EUR 1,400 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the processing of personal data, therefore violating Art. 13 GDPR.

GDPR Articles: Art. 12 (1) GDPR, Art. 13 GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/47822 · 2026-08-22