Belgium

Société Wallonne des Eaux

86,000 €

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2026-05-12.

Rank · Sector

#47

of 356 in Public Sector and Education

Rank · Belgium

of 50

Rank · All fines

#507

of 3,039

Case details

Authority: Belgian Data Protection Authority (APD)
Date: 2026-05-12
Controller / Processor: Société Wallonne des Eaux
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 12 (1), (2) GDPR, Art. 13 GDPR, Art. 28 (3) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Belgian DPA has imposed a fine of EUR 86,000 on Société Wallonne des Eaux. The controller had been recording and listening to phone calls with customers for service control and staff training purposes. However, the controller failed to adequately inform its employees about the recording of calls. Additionally, the controller failed to enter into a sufficient data processing agreement with a processor. The controller had also been reprimanded for having an insufficient legal basis for certain recordings, for additional violations regarding transparency towards its employees, for retaining certain recordings for longer than one month, for failing to conduct a data protection impact assessment, and for failing to inform the DPA of data breaches.

Open original source Links to the regulator's original publication or another source.