Claimant – Court Ruling (Netherlands, 2022)

Court Ruling
DPA RbZeeland-West-Braba14 October 2022Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Dutch court found that a person abused the legal process by making repeated access requests for personal data from a municipality. The court ruled that the individual did not follow proper procedures and was seeking monetary gains. This case highlights the importance of making legitimate requests for personal data.

What happened

A person made multiple access requests to a municipality but did not follow the required procedures.

Who was affected

The individual who made the access requests was affected by the court's ruling.

What the authority found

The court ruled that the individual abused legal instruments by not specifying their requests and seeking penalties for monetary gains.

Why this matters

This case illustrates that legal processes should be used responsibly, and it discourages frivolous requests that could burden public authorities.

GDPR Articles Cited

AI-verified

Art. 12(2) GDPR
Art. 15(1) GDPR
View original scraped data
Art. 12(2) GDPR
Art. 15(1) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Article 3:13 of the Dutch Civil Code
Article 3:15 of the Dutch Civil Code
Article 4:15 Awb
Article 4:5 Awb
Decision AuthorityRb. Zeeland-West-Brabant
Source verified 20 March 2026
authority corrected
Full Legal Summary
Detailed

The data subject made an access request to the municipality of Sluis (controller) on 18 August 2020. The controller responded on 24 September that they found no personal data related to the data subject and that it planned to reject the request. It also asked the data subject to specify their request by 9 October 2020, suspending it until that date. The data subject responded on 29 September 2020, requesting the controller to issue a decision and taking the point of view that the controller had exceeded the deadline. On 28 October 2020, the controller officially denied the request. The data subject sent another letter on 12 November 2020, requesting the controller to issue a decision based on his previous letter. On 20 December 2020, the data subject submitted a formal objection with the controller for not taking a decision for periodic penalty payments in a timely manner. The controller rejected the objection. The controller also sent the notice of objection to the court to treat as appeal. The Court initially ruled the appeal inadmissible, as the court fee had not been paid in time. The data subject objected to this decision, stating that he was not able to pay the fee. The objection was upheld on 17 September 2021. The initial ruling did not go into the request for penalty payment's. The Court found that the data subject made access requests to six other municipalities, for which the data subject also claimed penalty payments. On top of this, no clear purpose of the access request could be deduced. The data subject was not known by the controller and did not make use of the possibility to specify his request. Last, the data subject never objected to the controller's decision to deny the access request from 28 October 2020. The Court held that since data subject only made an access request and the subsequent request for a decision on periodic penalty payment's for monetary gains. Therefore, the data subject abused legal instruments. As a result, the Court ruled

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Details

Ruling Date

14 October 2022

Authority

DPA RbZeeland-West-Braba

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Claimant - Netherlands (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: