|
By Vincent WELLENS, Lindsay KORYTKO, Sigrid HEIRBRANT and Antoine PÉTRONIN, NautaDutilh Avocats Luxembourg S.à r.l.
The Luxembourg Data Protection Authority (CNPD) has published its first decisions following recent investigations of non-compliance with the General Data Protection Regulation (GDPR). The decisions relate to the role of the DPO, the geolocation of employees and video surveillance. Two of the three decisions on the role of the DPO concern insurance and reinsurance undertakings, which got off lightly with only a reprimand and/or an order to be complied with within four months' time. In the third decision on the role of the DPO, the CNPD imposed a fine of EUR 18,000 on the Luxembourg subsidiary of a corporate group. The CNPD decisions on the...
|