Sanction RGPD Belgian Data Protection Authority (APD) — Company : 20 k€ (2025)
- Autorité de contrôle
- Belgian Data Protection Authority (APD)
- Pays
- Belgique
- Entreprise / secteur
- Company
- Montant de l'amende
- 20 k€
- Date de la décision
- 22 avril 2025
- Fondement juridique
- Art. 5 (1) a), (2), Art. 6 (1), Art. 12 (1), Art. 14 (1), (2), Art. 15 (1) c), d), g), Art. 24 (1), Art. 25 (1)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Belgian DPA imposed a fine of EUR 20,000 on a company. The controller is a company engaging in direct marketing activities. During those activies the company failed to comply with multiple data processing principle. In particular the company had no sufficient legal basis for the data processing, failed to inform the data subjects and failed to provide data subjects with lawfully requested informations.