Details:
Summary | The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters relating to the protection of personal data. Second, the controller did not have a data protection control plan in place to demonstrate that the data protection officer was adequately performing its tasks. |
Link: | link |
Related articles: | Art. 38 (1) GDPR, Art. 39 (1) b) GDPR |
Type: | Insufficient involvement of data protection officer |
Fine: | EUR 13,200 |
Sector | Not assigned |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/