Sanction RGPD National Commission for Data Protection (CNPD) — Unknown : 13 k€ (2021)
- Autorité de contrôle
- National Commission for Data Protection (CNPD)
- Pays
- Luxembourg
- Entreprise / secteur
- Unknown
- Montant de l'amende
- 13 k€
- Date de la décision
- 29 juin 2021
- Fondement juridique
- Art. 5 (1) c), Art. 13
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The DPA from Luxembourg (CNPD) has imposed a fine of EUR 12,500 on a company. The company had installed a video surveillance system for the purpose of protecting company property, securing access to private and high-risk locations, and ensuring the safety of users and preventing accidents. However, the cameras also excessively captured parts of the public space and workplaces of employees. The DPA finds that the controller thus violated the principle of data minimization under Art. 5 (1) c) of the GDPR. In addition, the controller had not properly informed the data subjects about the processing of the data by the video surveillance and thus violated its duty to inform.