Belgium

Isabel SA

120,000 €

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2026-05-12.

Rank · Sector

#83

of 321 in Finance, Insurance and Consulting

Rank · Belgium

of 50

Rank · All fines

#441

of 3,039

Case details

Authority: Belgian Data Protection Authority (APD)
Date: 2026-05-12
Controller / Processor: Isabel SA
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 15 (1) GDPR, Art. 25 (2) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Belgian DPA has imposed a fine of EUR 120,000 on Isabel SA. The controller, who operates the 'TruliUs' authentication application, failed to provide data subjects with correct privacy information due to the fact that the data collected did not match that described in the privacy information. Additionally, the controller collected excessive amounts of data that were not necessary for processing purposes, and failed to adequately respond to a data subject's request to exercise their rights. Lastly, the controller misclassified itself as a processor.

Open original source Links to the regulator's original publication or another source.