What was the opinion of the Luxembourg supervisory authority?
Specifically, the supervisory authority criticized in particular that the data protection officer, contrary to Art. 38 (3) GDPR, did not report to the highest management level, was not sufficiently qualified and was not adequately involved in all issues of personal data protection.
In this video post, we explain everything about the above incident, what exactly Art. 38 & 39 GDPR are & why this also plays or can play a role for you and your company.