City Of Kortrijk

What happened

The Belgian DPA determined that two public controllers violated several GDPR provisions for sharing personal data in order to issue a parking fine. Both controllers did not have a legal basis for such processing and did not provide adequate transparency to the data subject.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a) · 5(2)Read →
• Art. 6Lawfulness of processing6(1)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
• Art. 14Information to be provided where personal data have not been obtained from the data subject14(1)(a)Read →

• Data principles
• Transparency
• Unlawful processing