Sanction RGPD National Commission for Data Protection (CNPD) — Company : 700 € (2022)
- Autorité de contrôle
- National Commission for Data Protection (CNPD)
- Pays
- Luxembourg
- Entreprise / secteur
- Company
- Montant de l'amende
- 700 €
- Date de la décision
- 13 décembre 2022
- Fondement juridique
- Art. 12 (1), Art. 13 (1) f)
- Manquement
- Obligation d'information insuffisante
Résumé des faits
The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the transfer of personal data to a third country or international organisation, therefore violating Art. 13 GDPR.