Search results

hereinafter “the first defendant” (DOS-2020-05649 and DOS-2021-05271); Company Y2, hereinafter “the second defendant” (DOS-2020-05649); Decision on merits

Internal regulations as approved by the Chamber of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering

internal order, as approved by the Chamber of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Having

The Belgian DPA (APD/GBA) imposed a fine of €50,000 and €15,000 on two different data controllers for breaching various principles of the GDPR, such as

Liechtenstein by a Decision of the EEA Joint Committee of 6 July 2018, which entered into force on 20 July 2018. This Decision is of no consequence in the present case

rules of procedure as approved by the Chamber of Representatives on 20 December 2018 and published in the Belgian Official Gazette on 15 January 2019; Having

the time of the personal data breach (in the period between 22/03/2018 and 28/05/2018), the defendant had not concluded a contract with the processor for

The Belgian DPA (APD/GBA) held that sharing a phone number poses a high risk to a data subject and that this must be classified as a critical data breach

Chamber Decision on the merits 72/2020 of November 09th 2020 File No.: DOS-2018-02075 Subject: Complaint against a hospital (processing of membership data)

The Belgian DPA (APD/GBA) held that sending a newsletter to the parents of school children with all email addresses visible in CC was a breach of the Article

original. Please refer to the French original for more details. File No.: DOS-2018-05421 Subject: Complaint against a City about the regularity of the consultation

internal order, as approved by the Chamber of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Having

The Belgian DPA (APD/GBA) held that intent is not a criterium to assess processing and that mistakenly sending an e-mail does not necessarily constitute

rule that Mr X's complaint of 20 September 2019 at the GBA was unfounded with regard to the concluding party; to order the GBA to pay the administrative fine

initiate such 35CJEU judgment of 5 June 2018,C-210/16, WirtschaftsakademieSchleswig-Holstein, ECLI:EU:C:2018:388. 20, processing in any way or form. The data

The Belgian DPA (APD/GBA) fined the defendant € 15000 for cookies placed without prior consent. The ADP/GBA conducted investigations into a webpage for

the Data Protection Authority (APD); Considering the decision of February 20, 2020 of the Front Line Service (SPL) of the APD declaring the complaint admissible

The Belgian DPA (APD/GBA) ordered an employer to delete the HR evaluation data on its employees. The decision comes after a complaint filed by an employee

within 3 months. GBA has also issued a reprimand for the violation of Articles 12-14. No fines were issued because the predecessor of GBA had reviewed and

November 2018, the Management Committee of the Data Protection Authority (hereinafter the GBA) decided to refer a case to the Inspectorate of the GBA on the

be no question of the application of Article 20 AVG and that the GBA was not competent in the matter. GBA was not competent in this matter, that there

van de opinie van de EDPB 05/2018 gepubliceerd op https://edpb.europa.eu/sites/edpb/files/files/file1/2018- 09-25-opinion_2018_art._64_de_sas_dpia_list_en

The Belgian DPA (APD/GBA) assessed whether the defendant (an autonomous provincial public entity for tourism) breached the GDPR by placing intelligent

were already discussed in front of the APD. The Court can do so in case of a manifest factual or legal error by the APD. The Court confirmed the violations

of Representatives on 20 Having regard to the rules of procedure as approved by the House of Representatives on 20 December 2018 and published in the Belgian

The settlement covered possible violations in the period between 25 May 2018 to 20 November 2020. The DPA determined that the settlement decision (168/2022)

the APD considered that the controller sent vague and imprecise information about the source of the data subject’s personal data. Therefore, the APD concluded

the Rules of Procedure as approved by the House of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

internal order, as approved by the Chamber of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Having

measures to prevent it. He also stated that he would complain with the GBA. The GBA explained that when it dismisses a complaint, it must give reasons for

functioning of the company. However, the GBA added that the other provisions of the GDPR must also be respected. The GBA then established that the controller

Decision on the merits 124/2021 of 10 November 2021 File number : DOS-2018-05039en DOS-2018-05524 Subject : Sharing of personal data concerning tenants of

Therefore, the APD considered that the second controller failed to comply with its duty to provide information under Article 13 GDPR. The APD thus dismissed

as approved by the House of Representatives Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering

points. The APD indicated that the proposed settlement would not be modified in accordance with the data subject’s requests. Firstly, the APD noted that

“possibly” taking copies, the APD considered that there was no evidence that the file was effectively taken or stolen. Therefore, the APD dismissed the complaint

internal regulations as approved by the House of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

as approved by the House of Representatives Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering

as approved by the House of Representatives Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering

the Rules of Procedure as approved by the House of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

rules of procedure, as approved by the Chamber of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

of internal order, as approved by the Chamber of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

internal regulations as approved by the House of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

of procedure, as approved by the Chamber of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Having

internal regulations as approved by the House of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering

number was changed. The DPA imposed a fine of €20.000 on the controller. This is a reopening of decision 05/2021. There, the DPA fined the controller €25

no opt-out option to customers. A Twitter user notified the Belgian DPA (APD/GBA) of an email she had received from the Belgian National Railway (NMBS) about

as approved by the Chamber of Representatives of the people on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering

of procedure, as approved by the Chamber of Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Having

of internal order, as approved by the Chamber of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

internal regulations as approved by the House of Representatives on 20 December 2018 and published in the Belgian Official Gazette on January 15, 2019;

as approved by the House of Representatives Representatives on December 20, 2018 and published in the Belgian Official Gazette on January 15, 2019; Considering