Unknown
Non-compliance with general data processing principles
Päätöspäivä
6. lokakuuta 2021
Viranomainen
National Commission for Data Protection (CNPD)
LU
Ala
Not assigned
Maa
CZ
Laki
GDPRTila
FINALKuvaus
The DPA from Luxembourg has imposed a fine of EUR 5,300 on a company. The company had installed 75 surveillance cameras on its premises as well as tracking devices in some of its vehicles used by employees to travel to customers. A few of these cameras covered, among other things, parts of a public street and a private neighboring property. During its investigation, the DPA also found that the cameras covered the employee cafeteria, allowing employees to be monitored outside of their working hours. The DPA found this to be a violation of the principle of data minimization. It also found that the controller had not sufficiently complied with its information obligations under Art. 13 GDPR.