Details:
| Summary | The DPA from Luxembourg has imposed a fine of EUR 13,200 on a company. According to the DPA, the controller firstly failed to involve the data protection officer in all matters relating to the protection of personal data. Second, the controller did not have a data protection control plan in place to demonstrate that the data protection officer was adequately performing its tasks. |
| Link: | link |
| Related articles: | Art. 38 (1) GDPR, Art. 39 (1) b) GDPR |
| Type: | Insufficient involvement of data protection officer |
| Fine: | EUR 13,200 |
| Sector | Not assigned |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/