For information purposes, the European Data Protection Board (EDPB) publishes on its website a list of the decisios taken and sanctions ordered by the European supervisory authorities to allow the various actors to better understand the application of the General Data Protection Regulation (GDPR).
- 2020: https://edpb.europa.eu/news/national-news/2020_en
- 2019: https://edpb.europa.eu/news/national-news/2019_en
- 2018 https://edpb.europa.eu/news/national-news/2018_en
This information, quite substantial for monitoring the consistency in the matter, brings clarity to the current legal context.
Luxembourg’s National Commission for Data Protection (Commission nationale pour la protection des données or “CNPD”) has not yet issued a publication on any sanctions that it may have ordered. It would appear that this is due to the fact that the Luxembourg supervisory authority does not wish to publish information on sanctions that may have been ordered as long as the periods for their appeal have not yet expired.
We will thus monitor this situation in the Grand Duchy of Luxembourg…