Belgian Data Protection Authority (APD) · 22 April 2025
Company
Non-compliance with general data processing principles
Fine€20,000Fine issued
- Regulator
- Belgian Data Protection Authority (APD)
- Decided
- 22 April 2025
- Country
- Belgium
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/BE/004
What happened
The DPA fined a B2B data broker €20,000 for unlawfully collecting and disclosing a data subject's email address, and for numerous other GDPR violations. In particular, the DPA held that the processing was not justified by the controller's legitimate interest.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
- Art. 24Responsibility of the controller24(1)Read →
- Art. 25Data protection by design and by default25(1)Read →
- Accountability
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/BE/004.