Unknown – €15,000 Fine (Belgium, 2020)

€15,000Autorité de Protection des Données23 December 2020Belgium
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Belgian Data Protection Authority fined a debt collection agency EUR 15,000 for not properly handling a user's data request. The agency failed to provide timely information about data processing related to a parking fine. This case underscores the importance of respecting user rights under GDPR.

What happened

A debt collection agency did not fulfill a user's request for information about data processing related to a parking fine.

Who was affected

Individuals whose data was processed by the debt collection agency for parking fines.

What the authority found

The authority found the agency violated GDPR by not responding to data requests in a timely manner.

Why this matters

This decision serves as a reminder for companies to respect user rights and respond promptly to data requests. It highlights the importance of compliance with GDPR in handling personal data.

GDPR Articles Cited

Art. 6 GDPR
Art. 5(1)(c) GDPR
Art. 12(3) GDPR
Art. 14(1) GDPR
Art. 24(1) GDPR
Full Legal Summary
Detailed

The Belgian DPA (APD) imposed a fine of EUR 15,000 on a company due to insufficient fulfilment of data subject rights. The controller is a debt collection agency which was commissioned by another company to collect debts owed to it. The data subject was issued a fine for illegal parking by the last-mentioned company. However, the data subject states that he/she did not receive the fine notice. Instead, the data subject only learned about it when he/she received an official reminder letter from the controller, which then demanded payment of the reminder fees in addition to the original fine. The data subject then contacted the controller and requested, among other things, information about which of his/her personal data had been processed. After this request was not fulfilled in a timely manner, the data subject filed a complaint against the controller . During its investigation, the DPA found that the controller had violated provisions of the GDPR, for example, by failing to comply with the data subject's request for information on the data processing.

Details

Fine Date

23 December 2020

Authority

Autorité de Protection des Données

Fine Amount

€15,000

Enforcement Tracker ID

ETid-500

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Belgium (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: