Details:

Summary The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters relating to the protection of personal data. Second, the controller did not have a data protection control plan in place to demonstrate that the data protection officer was adequately performing its tasks.
Link: link
Related articles:  Art. 38 (1) GDPR, Art. 39 (1) b) GDPR
Type: Insufficient involvement of data protection officer
Fine: EUR 13,200
Sector Not assigned

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law