Autoriteit Persoonsgegevens (Dutch DPA) – Court Ruling (Netherlands, 2020)

Court Ruling
DPA RbRotterdam1 May 2020Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Dutch court ruled that the Autoriteit Persoonsgegevens (Dutch DPA) delayed a decision on a complaint and must pay a penalty for this delay. This is important because it emphasizes the need for timely responses from regulatory bodies. Small businesses should know that delays in decision-making can lead to penalties.

What happened

The court found that the DPA was responsible for a delay in delivering a decision on a complaint due to postal service issues.

Who was affected

A claimant who was waiting for a decision from the Dutch DPA regarding her case.

What the authority found

The court ruled that the DPA must pay penalties for not handling complaints in a timely manner, regardless of external postal delays.

Why this matters

This case highlights the importance of timely communication from regulatory bodies. Businesses should ensure they follow up on their complaints and understand the timelines involved.

National Law Articles

AI-identified

Article 3:41 Dutch administrative law
Article 4:17(1)(2) Dutch administrative law
Decision AuthorityRb. Rotterdam
Source verified 20 March 2026
articles corrected
national law identified
authority corrected
Full Legal Summary
Detailed

On 8 January 2019 DPA agreed to pay a penalty to the claimant for delaying the decision on her case. The decision was due on 30 November 2018. According to the DPA, the penalty was supposed to be 60 EUR for the delay until 3 December 2018. Claimant objected because the registered letter with the decision was delivered to her on 8 January 2019 instead of 3 December 2018. On 8 May 2019 DPA declared the claimant’s objection not valid. Claimant launched an appeal. The Court must assess whether the DPA was responsible for the delay in delivering the decision caused by a mistake at the postal service. The Court agreed with the claimant. Article 4:17(1) of the Dutch administrative law says that an administrative body must pay penalties for not handling complaints in a timely manner. Article 4:17(2) of the same law defines the size of the penalty: 23 EUR per day for the first 14 days of delay, 35 EUR per day for the subsequent 14 days and 45 EUR per day after that. The Court ruled that a decision can be considered finalized when the applicant is made aware of it. In the present case the decision was sent to the complaint by registered mail, but it arrived with a delay because of a mistake at the postal service. According to the Court, this fact did not relieve the DPA of its responsibility: Autoriteit Persoonsgegevens should have considered the risks of sending the decision by post when choosing method of communication.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Details

Ruling Date

1 May 2020

Authority

DPA RbRotterdam

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Autoriteit Persoonsgegevens (Dutch DPA) - Netherlands (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: