Content type · 36 documents in this view · 3,811 in total
Enforcement
Regulatory actions, fines, warnings, and enforcement decisions
Country: Luxembourg (36) Clear filter
Filter by Topic Supervisory Authorities 3587 Processing 2635 Personal Data 2394 Controllers 2017 Processing Agreement 1114 Security 1013 Supervision 847 Healthcare 621 Law Enforcement 568 Monitoring 547 Public Authority 539 Consent 508
€7,000 Company: Non-compliance with general data processing principles The DPA of Luxembourg has issued a fine of EUR 7,000 on a company. The controller failed to maintain complete records of its processing activities. LUXEMBOURG ·Art. 30 Apr 30, 2025
€7,000 Bedrijf: Niet-naleving van algemene principes voor gegevensverwerking. Boete van €7.000 - Nationale Commissie voor de Bescherming van Persoonsgegevens (CNPD). LUXEMBOURG ·Art. 30 Apr 30, 2025
€175,000 Credit Institution: Insufficient fulfilment of data subjects rights The DPA of Luxembourg has issued a fine of EUR 175,000 on a Credit Institution. The controller failed to respond to information requests within the timeframe specified in Art. 12… LUXEMBOURG ·Art. 12 Jan 6, 2025
€2,300 Company: Non-compliance with general data processing principles The DPA of Luxembourg has issued a fine of EUR 2,300 on a company, that is active in the retail sale of telecommunication equipement in specialised stores. The controller had… LUXEMBOURG ·Art. 5, 6, 13 +2 Nov 20, 2024
€2,500 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA of Luxembourg has imposed a fine of EUR 2,500 on a controller. The controller had used location systems on his service vehicles and construction machinery. During its… Art. 5, 13 ·Non-compliance with general data processing principles Sep 21, 2023
€700 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not… LUXEMBOURG ·Art. 12, 13 Dec 13, 2022
€1,500 Manager of a real estate co-ownership: Insufficient legal basis for data processing The DPA of Luxembourg has imposed a fine of EUR 1,500 on a manager of a real estate co-ownership. The controller had disclosed personal data to unauthorized third parties without… LUXEMBOURG ·Art. 5, 6, 12 +1 Dec 13, 2022
€1,000 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 1,000 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not… LUXEMBOURG ·Art. 12 Dec 13, 2022
€2,500 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 2,500 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not… LUXEMBOURG ·Art. 12 Dec 13, 2022
€2,100 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 2,100 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not… LUXEMBOURG ·Art. 12, 13 Dec 13, 2022
€1,400 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 1,400 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not… LUXEMBOURG ·Art. 12, 13 Dec 13, 2022
€10,000 Company: Non-compliance with general data processing principles The DPA of Luxembourg (CNPD) has imposed a fine of EUR 10,000 on a company. The company had installed a video surveillance system for the purpose of protecting company property… LUXEMBOURG ·Art. 5, 13 Jul 22, 2022
€1,400 Company: Non-compliance with general data processing principles The DPA of Luxembourg (CNPD) has imposed a fine of EUR 1,400 on a company. The controller had installed location sensors on a number of cars in its fleet. The purpose of this was… LUXEMBOURG ·Art. 5, 13 Jun 30, 2022
€1,000 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 1,000 on a company. The company had installed a video surveillance system that recorded both employees and third parties. During… LUXEMBOURG ·Art. 5, 12, 13 Jun 30, 2022
€1,000 Company: Insufficient fulfilment of information obligations The DPA of Luxembourg has imposed a fine of EUR 1,000 on a company. The company had installed a video surveillance system that recorded both employees and third parties. During… LUXEMBOURG ·Art. 5, 12, 13 Jun 30, 2022
€3,000 Company: Non-compliance with general data processing principles The DPA of Luxembourg (CNPD) has imposed a fine of EUR 3,000 on a company. The company had installed a video surveillance system for the purpose of protecting company property and… LUXEMBOURG ·Art. 5, 13 Jun 22, 2022
€1,000 Café owner: Non-compliance with general data processing principles The DPA from Luxembourg has imposed a fine of EUR 1,000 on a café owner. The owner had installed two video surveillance cameras in the café for the purpose of protecting company… LUXEMBOURG ·Art. 5, 13 Feb 2, 2022
€6,800 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 6,800 on a company. The company had installed a video surveillance system to protect the company's assets, prevent… Art. 5, 13 ·Non-compliance with general data processing principles Dec 1, 2021
€1,500 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,500 on a company. The company had installed a video surveillance system to ensure that their customers would not have to… Art. 5, 13 ·Non-compliance with general data processing principles Nov 9, 2021
€18,700 Company: Insufficient involvement of data protection officer The DPA of Luxembourg has imposed a fine of EUR 18,700 on a company. During its investigation, the DPA first found that the controller's public website did not include direct… LUXEMBOURG ·Art. 37, 38, 39 Oct 27, 2021
€15,400 LUXEMBOURG DPA: Insufficient involvement of data protection officer The Luxembourg DPA has imposed a fine of EUR 15,400 on a company. According to the DPA, the controller failed to involve the data protection officer in all matters related to the… Art. 38, 39 ·Insufficient involvement of data protection officer Oct 27, 2021
€13,200 LUXEMBOURG DPA: Insufficient involvement of data protection officer The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters… Art. 38, 39 ·Insufficient involvement of data protection officer Oct 13, 2021
€18,000 LUXEMBOURG DPA: Insufficient involvement of data protection officer The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller failed to involve the data protection officer in all matters relating… Art. 37, 38, 39 ·Insufficient involvement of data protection officer Oct 13, 2021
€5,300 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg has imposed a fine of EUR 5,300 on a company. The company had installed 75 surveillance cameras on its premises as well as tracking devices in some of its… Art. 5, 13 ·Non-compliance with general data processing principles Oct 6, 2021
€135,000 Insurance company: Insufficient technical and organisational measures to ensure information security The DPA of Luxembourg has imposed a fine of EUR 135,000 on an insurance company. On October 19, 2018, an employee of the controller had sent an e-mail to an uninvolved third party… LUXEMBOURG ·Art. 5, 32, 33 Aug 5, 2021
€746M Amazon Europe Core S.à.r.l.: Non-compliance with general data processing principles In its quarterly report, Amazon.com Inc. announced that the DPA from Luxembourg (CNPD) had fined Amazon Europe Core S.à r.l. EUR 746,000,000 for failing to process personal data… LUXEMBOURG ·Non-compliance with general data processing principles Jul 16, 2021
€12,500 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 12,500 on a company. The company had installed a video surveillance system for the purpose of protecting company property,… Art. 5, 13 ·Non-compliance with general data processing principles Jun 29, 2021
€7,600 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 7,600 on a company. This company had installed a video surveillance system for the purpose of protecting the company's… Art. 5, 13 ·Non-compliance with general data processing principles Jun 11, 2021
€7,200 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 7,200 on a company. The company had installed a video surveillance system to protect the company's assets, prevent… Art. 5, 13, 32 ·Non-compliance with general data processing principles Jun 11, 2021
€15,000 LUXEMBOURG DPA: Insufficient involvement of data protection officer The DPA of Luxembourg (CNPD) has imposed a fine of EUR 15,000 on a company. During an investigation, the DPA found that the controller had not sufficiently involved the data… Art. 38, 39 ·Insufficient involvement of data protection officer Jun 11, 2021
€18,000 LUXEMBOURG DPA: Insufficient involvement of data protection officer The DPA of Luxembourg has imposed a fine of EUR 18,000 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters… Art. 38, 39 ·Insufficient involvement of data protection officer May 31, 2021
€1,900 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,900 on a company. The controller had installed a video surveillance system to protect the company's assets and prevent… Art. 5 ·Non-compliance with general data processing principles May 12, 2021
€2,400 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 2,400 on a company. The controller had installed a video surveillance system to protect the company's assets and prevent… Art. 5 ·Non-compliance with general data processing principles May 12, 2021
€1,000 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 1,000 on a company. The controller had installed a video surveillance system with the purposes of the protection of… Art. 5, 13 ·Non-compliance with general data processing principles May 12, 2021
€2,600 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 2,600 on a company. The controller had installed a video surveillance system to protect the company's assets and prevent… Art. 5, 13 ·Non-compliance with general data processing principles May 12, 2021
€2,800 LUXEMBOURG DPA: Non-compliance with general data processing principles The DPA from Luxembourg (CNPD) has imposed a fine of EUR 2,800 on a company. The controller had installed location sensors on a number of cars in its fleet. The purpose of this… Art. 5, 13 ·Non-compliance with general data processing principles Apr 8, 2021