X versus Y

What happened

The Belgian DPA imposed a fine of 5 000 € for failing to uphold the right to object of a data subject by irregularly processing personal data and failing its obligation of ensuring data protection measures by default and design.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 6Lawfulness of processing6(1)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(2)Read →
• Art. 21Right to object21(3)Read →
• Art. 25Data protection by design and by defaultRead →

• Accountability
• Data principles
• Data subject rights
• Transparency
• Unlawful processing