Autoriteit Persoonsgegevens – Court Ruling (Netherlands, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Amsterdam District Court decided that Booking.com needed to consult the Spanish data protection authority before collecting personal data for tax purposes. This matters because it clarifies which authority is responsible for overseeing data collection in cross-border situations. Companies should be aware of the proper channels to follow when dealing with international data regulations.
What happened
The court upheld a decision denying Booking.com's request for prior consultation with the Dutch DPA.
Who was affected
Booking.com, which collects personal data to comply with Spanish tax law.
What the authority found
The court ruled that the Spanish data protection authority is the competent supervisory authority for this case.
Why this matters
This ruling emphasizes the importance of knowing which data protection authority to consult in cross-border data collection. Businesses operating internationally should ensure they understand the jurisdictional rules that apply to their data practices.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The Amsterdam District Court upheld a decision by the Dutch DPA to deny Booking.com's request for prior consultation. The court ruled that the Spanish DPA is the competent supervisory authority, as the personal data would be collected to comply with a Spanish tax law.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (10)
Other cases involving Autoriteit Persoonsgegevens in NL
Court Ruling
Details
About this data
Cite as: Cookie Fines. Autoriteit Persoonsgegevens - Netherlands (2021). Retrieved from cookiefines.eu
Last updated: