APD/GBA (Belgium) - 42/2023
|APD/GBA - 42/2023
|Article 9(2)(h) GDPR
Article 17 GDPR
Article 17(1) GDPR
Article 17(3) GDPR
Art. 95, §1, 3° WOG
|National Case Number/Name:
|European Case Law Identifier:
|Gegevensbeschermingsautoriteit (in NL)
The Belgian DPA dismissed a request to erasure based on Article 17(3) GDPR because of reasons of public interest in the field of public health in according with Article 9(2)(h)GDPR. It is not up the DPA to determine the correctness of an opinion written by a care provider in light of child protection services regarding the mental well-being of both the child and the mother.
English Summary[edit | edit source]
Facts[edit | edit source]
The decision revolved around a motivational document of a family created by a care provider in light of child protection services. The document labels the family as potentially alarming because of mental well-being of the child and the parents. The mother, the data subject in this case, vehemently disagrees with both the content and the creation process of the document and wants it deleted in its entirety based on Article 17 GDPR. The controller denied this request of erasure.
Holding[edit | edit source]
The DPA dismissed the complaint on the basis of article 95, §1, 3° WOG (Law establishing the DPA). The DPA established that the right to erasure of Article 17 GDPR has been exercised correctly. However, this right is not aimed at being able to contest the correctness of a document containing personal findings and assessments of care providers regarding the mental well-being of both the child and the mother within their mutual relationship. The document contained the individual opinion of the care provider, which falls within their legal tasks regarding child protection services. As such, the DPA held that the document cannot be erased based on Article 17(1) GDPR.
Adding to this, the DPA held that Article 17(3) GDPR established that the right to erasure does not apply for reasons of public interest in the field of public health in according with Article 9(2)(h)GDPR. The DPA concluded that it is not up to the DPA to determine the correctness of the information in the document and thus order the fulfillment of the request of erasure.
Comment[edit | edit source]
Share your comments here!
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the Dutch original. Please refer to the Dutch original for more details.
1/5 Litigation room Decision 42/2023 of 17 April 2023 File number : DOS-2022-05247 Exercising the right to data erasure with regard to motivation document drawn up in the context of integrated youth care The Disputes Chamber of the Data Protection Authority, composed of Mr Hielke Hijmans, sole chairman; Having regard to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the law of 3 December 2017 establishing the Data Protection Authority, hereinafter WOG; Having regard to the rules of internal order, as approved by the Chamber of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019; Having regard to the documents in the file; has taken the following decision regarding: . The complainant: Mrs X, hereinafter referred to as “the complainant”; . . The controllers: Y, hereinafter “controller”; Decision 42/2023 - 2/5 I. Factual Procedure 1. On 25 February 2023, the complainant submitted a complaint to the Data Protection Authority against controller. 2. The object of the complaint concerns the layout within the framework of integral youth care of a motivation document, called M-document, drawn up by the controller as a result of the alarming situation that would have been identified within the complainant's family and where the child was referred to as a KOPP child, being a child of parents with mental health problems. The complainant strongly disagrees with the content of the M-document, as well as the way in which this document was created and has requested the controller to review this document in its entirety delete it, especially since the controller has the M document transferred to the Support Center for Youth Care (OCJ) according to the complainant also has incorrect information. This request for complete removal of the M document is not followed up by the controller. 3. On March 20, 2023, the complaint will be declared admissible by the First Line Service on the grounds of the articles 58 and 60 WOG and the complaint is transferred on the basis of art. 62, § 1 WOG to the dispute room. II. Motivation 4. On the basis of the elements in the file known to the Litigation Chamber, and on the basis of the powers assigned to it by the legislator on the basis of Article 95, §1 WOG, the Litigation Chamber decides on the further follow-up of the file; in this case the Disputes Chamber about the dismissal of the complaint in accordance with Article 95, §1,3 ° WOG, on the basis of the following justification. 5. When a complaint is dismissed, the Disputes Chamber makes its decision step-by-step motivation and: - pronounce a technical dismissal if the file is not or not sufficient contains elements that could lead to a conviction, or if there are not enough there is a prospect of a conviction for a technical obstacle, as a result of which she cannot come to a decision; 1Court of Appeal Brussels, Sectie Marktenhof, 19 Chamber A, Chamber for Market Affairs, judgment 2020/AR/329, 2 September 2020, p. 18. Decision 42/2023 - 3/5 - or declare a policy dismissal, if despite the presence of elements which may lead to a sanction, the continuation of the investigation of the file seems inappropriate in light of the priorities of the Data Protection Authority, as specified and explained in the 2 dismissal policy of the Litigation Chamber . 6. In the event that more than one ground is dismissed, the grounds for dismissal (resp. technical dismissal and policy dismissal) must be dealt with in order of importance. 3 7. In the present file, the Disputes Chamber proceeds to a technical dismissal of the complaint. The following motive is at the basis of the decision of the Disputes Chamber why it considers it undesirable to follow up on the file and therefore decides not to to proceed to, inter alia, a treatment on the merits. 8. The Disputes Chamber determines that the right to erasure of data (Article 17 GDPR) becomes exercised in relation to the relevant M document issued by the controller has been drawn up regarding the minor son of the complainer. In concrete terms, the exercise of the right to erasure is aimed at document submitted by the controller to the Support Center for Youth Care (OCJ), to be deleted in its entirety, because this document according to the complainant, contained completely incorrect information. 9. In this context, the Disputes Chamber rules that this request from the complainant is beyond its scope is subject to the right to erasure of Article 17 GDPR. This right is not aimed at the accuracy of an M-document containing personal findings and assessments of care providers contains in this case the mental well-being of both the child and the child the mother within their mutual relationship. In a context like the the present in which an M document by definition contains the individual opinion of the person concerned helper is worded about those who are the object of help, this within the legally assigned tasks with regard to integral youth care, cannot become the M-document deleted pursuant to Article 17.1 GDPR in the absence of application of the provisions in this provision cases mentioned. 2 In this context, the Litigation Chamber refers to its dismissal policy as explained in detail on the website of the GBA: https://www.dataprotectionauthority.be/publications/sepotbeleid-van-de-geschillenkamer.pdf 3Ibid. 4Article 17.1. AVG. The data subject has the right of the controller to erasure without undue delay to obtain personal data concerning him and the controller is obliged to process personal data without erase unreasonable delay where one of the following applies: a) the personal data is no longer necessary for the purposes for which they were collected or otherwise processed; (b) the data subject withdraws consent subject to the processing pursuant to point (a) of Article 6(1) or point (a) of Article 9(2); is based on, and there is no other legal basis for the processing; c) the data subject objects to the processing in accordance with Article 21(1) and there are no overriding compelling legitimate grounds for the processing, or the data subject objects to the processing in accordance with Article 21, paragraph 2; Decision 42/2023 - 4/5 10. In addition to this, the Disputes Chamber notes that Article 17.3 GDPR also stipulates that the right to data erasure cannot be exercised for reasons of public interest in the field of public health in accordance with Article 9.2 h) GDPR, when the processing is necessary for, among other things, the provision of social services. 11. The degree of accuracy of the information reported by the controller evaluation of mental well-being, as recorded in an M-document, cannot be assessed by the Disputes Chamber, which makes it impossible for it to, following the exercise of the right of rectification by the complainant, to order the controller to delete the M document. After all, it's not coming to the Dispute Chamber to verify the veracity of mental well-being evaluations and, if necessary, link it to a data erasure order. III. Publication of the decision 12. Given the importance of transparency with regard to decision-making by the Litigation Chamber, this decision will be published on the website of the Data Protection Authority. However, it is not necessary for the identification data of the parties are disclosed directly. 13. In accordance with its dismissal policy, the Disputes Chamber will make the decision to the transfer identified data controllers. The Disputes Chamber has decided to officially notify its dismissal decisions defendants. However, the Litigation Chamber will waive such notification when the the complainant has requested anonymity with respect to the defendant's notification of the decision to the defendant, even if pseudonymised, nevertheless d) the personal data have been processed unlawfully; e) the personal data must be erased in order to comply with a law laid down in Union or Member State law legal obligation incumbent on the controller; f) the personal data have been collected in connection with the offer of information society services referred to in Article 8(1). 5 Article 17.3. AVG. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: […] (c) for reasons of public interest in the field of public health in accordance with points (h) and (i) of Article 9(2) and Article 9(3); 6Article 9.2 h) GDPR. The processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the employee's fitness for work, medical diagnoses, the provision of health care or social services or treatment or the management of healthcare systems and services or social systems and services, under Union law or Member State law, or under a contract with a healthcare professional and subject to those mentioned in paragraph 3 conditions and guarantees;[own emphasis] 7 cf. Title 5 – Will the dismissal of my complaint be published? Will the counterparty be notified? by the dismissal policy of the Litigation Chamber. Decision 42/2023 - 5/5 8 makes it possible to (re)identify the complainant . However, this is not the case in the present case. FOR THESE REASONS, the Disputes Chamber of the Data Protection Authority decides, after deliberation, to op based on art. 95, §1, 3° of the law of December 3, 2017 establishing the Data Protection Authority, to dismiss the current complaints. Pursuant to Article 108, § 1 of the WOG, within a period of thirty days from the notice of appeal against this decision may be lodged with the Market Court (Court of Appeal Brussels), with the Data Protection Authority as the defendant. Such an appeal may be made by means of an inter partes petition 9 Article 1034ter of the Judicial Code must contain enumerated statements. It a contradictory petition must be submitted to the Registry of the Market Court 10 in accordance with article 1034quinquies of the Ger.W. , or via the e-Deposit IT system of Justice (Article 32ter of the Ger.W.). To enable the complainant to consider other possible remedies, the 11 Litigation Chamber the complainant to the explanation in its dismissal policy . (get). Hilke Hijmans Chairman of the Litigation Chamber 8 Ibid. 9 The petition states under penalty of nullity: 1° the day, month and year; 2° the surname, first name, place of residence of the applicant and, where applicable, his capacity and his national register or enterprise number; 3° the surname, first name, place of residence and, where appropriate, the capacity of the person to be summoned; 4° the object and brief summary of the means of the claim; 5° the court before which the action is brought; 6° the signature of the applicant or his lawyer. 10The application with its annex is sent by registered letter in as many copies as there are parties involved deposited with the clerk of the court or at the clerk's office. 11 cf. Title 4 – What can I do if my complaint is closed? of the dismissal policy of the Litigation Chamber.