# Road transport company: Non-compliance with general data processing principles

- Type: Enforcement
- Source: National Commission for Data Protection (CNPD)
- Date: 2025-12-16
- Original: https://www.enforcementtracker.com/ETid-3401
- Canonical: https://overview.legal/posts/607211
- Topics: Records of processing activities, Accountability, Processing, Pseudonymization

## Summary

The Luxembourg National Commission for Data Protection (CNPD) fined a road transport company €1,280 for failing to maintain proper records of processing activities, violating Article 30(1) of the GDPR. The violation stemmed from the company's non-compliance with general data processing principles within the transportation sector.

## Full text

National Commission for Data Protection (CNPD) fined Road transport company €1,280 on 2025-12-16 for: Non-compliance with general data processing principles.
GDPR Articles: Art. 30 (1) a), c), d), f), g) GDPR
Sector: Transportation and Energy
Country: Luxembourg
Source: https://cnpd.public.lu/content/dam/cnpd/fr/decisions-fr/2025/dcision-nr-6fr-2025-version-pseudonymise.pdf

## Cited law provisions (2)

### GDPR — gdpr-art-30-par-1-en

Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. That record shall contain all of the following information:

### GDPR — gdpr-art-30-en

Records of processing activities

---
Generated by overview.legal · https://overview.legal/posts/607211 · 2026-11-14