National Commission for Data Protection (CNPD) · 27 October 2021
Company
Insufficient involvement of data protection officer
Fine€18,700Fine issued
- Regulator
- National Commission for Data Protection (CNPD)
- Decided
- 27 October 2021
- Country
- Luxembourg
- Sector
- Not given
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/LU/001
What happened
Following an audit, the Luxembourg DPA (CNPD) imposed a fine of €18,700 on a company because of four breaches relating to the role and position of its Data Protection Officer (DPO), and issued an injunction against that company to bring its practices into compliance with the GDPR within four months.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 37Designation of the data protection officer37(7)Read →
- Art. 39Tasks of the data protection officer39(1)(b)Read →
- Data protection officer
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/LU/001.