Sanction RGPD Belgian Data Protection Authority (APD) — Merchant : 10 k€ (2019)
- Autorité de contrôle
- Belgian Data Protection Authority (APD)
- Pays
- Belgique
- Entreprise / secteur
- Merchant
- Montant de l'amende
- 10 k€
- Date de la décision
- 17 septembre 2019
- Fondement juridique
- Art. 5 (1) c)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Belgian data protection authority has imposed a fine of 10,000 euros on a merchant who wanted to use an electronic identity card (eID) to create a customer card. The DPA's investigation revealed that the merchant required access to personal data located on the eID, including the photo and barcode which is linked to the data subject's identification number. In the meantime, the decision of the data protection authority has been annulled by a court: <a class='blau' href='https://www.gegevensbeschermingsautoriteit.be/sites/privacycommission/files/documents/Arrest_190220.pdf' target='_blank'>link</a>