Belgium

Company

20,000 €

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2025-04-22.

Rank · Sector

#165

of 595 in Industry and Commerce

Rank · Belgium

#21

of 50

Rank · All fines

#1,093

of 3,042

Case details

Authority: Belgian Data Protection Authority (APD)
Date: 2025-04-22
Controller / Processor: Company
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), (2) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR, Art. 14 (1), (2) GDPR, Art. 15 (1) c), d), g), Art. 24 (1) GDPR, Art. 25 (1) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Belgian DPA imposed a fine of EUR 20,000 on a company. The controller is a company engaging in direct marketing activities. During those activies the company failed to comply with multiple data processing principle. In particular the company had no sufficient legal basis for the data processing, failed to inform the data subjects and failed to provide data subjects with lawfully requested informations.

Open original source Links to the regulator's original publication or another source.