EU data protection regulation that the CNPD enforces in Luxembourg. The CNPD cites it for records of processing (Art. 30) and for the 72-hour breach notification rule.
In decision 4FR/2025 of 16 December 2025 the CNPD found a company in breach of Article 30(1)(a), (c), (d), (e), (f) and (g) GDPR for insufficient information in its record of processing activities, and fined it EUR 2,784. Several other 2025 CNPD decisions concern the same subject.
This site uses only the cookies it needs to work, such as keeping you logged in. It uses no advertising or tracking cookies.
Read the Cookie Notice.
Suggest a correction or addition
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
