Belgium

Non-profit organisation

1,000 €

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2020-05-29.

Rank · Sector

#176

of 351 in Individuals and Private Associations

Rank · Belgium

#47

of 50

Rank · All fines

#2,594

of 3,051

Case details

Authority: Belgian Data Protection Authority (APD)
Date: 2020-05-29
Controller / Processor: Non-profit organisation
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 GDPR, Art. 21 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Open original source Links to the regulator's original publication or another source.