Belgian Data Protection Authority (APD) · 1 April 2022
Company
Insufficient fulfilment of data subjects rights
- Regulator
- Belgian Data Protection Authority (APD)
- Decided
- 1 April 2022
- Country
- Belgium
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/BE/006
What happened
The Belgian DPA issued a €7500 fine against a company for restoring data on a former employee's work laptop after termination and subsequently violating the data subject's rights to access, erasure, restriction and objection. This decision was later annulled by the Court of Appeal and the DPA was also ordered to pay the procedural damages of €1,680.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 15Right of access by the data subjectRead →
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Art. 18Right to restriction of processingRead →
- Art. 21Right to objectRead →
- Art. 28ProcessorRead →
- Data principles
- Data subject rights
- Processor obligations
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/BE/006.