Law Firm – €4,920 Fine (Belgium, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A law firm in Belgium was fined for not properly handling a client's request for their personal data. After the client’s relationship with the firm ended, their daughter asked for access to the data but was initially denied. This case shows the importance of clear communication about data rights.
What happened
The law firm denied a request for personal data access from a former client’s daughter.
Who was affected
The former client and their daughter who sought access to the personal data.
What the authority found
The Belgian DPA found that the law firm failed to adequately inform the client about their rights and charged a fee for the data request.
Why this matters
This case emphasizes the need for businesses to be transparent about how they handle personal data requests. Companies should have clear policies in place to inform users about their data rights.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Belgian DPA has imposed a fine of EUR 4,920 on a law firm. The controller had a client relationship with the data subject. After the relationship ended, the data subject's daughter requested access to their personal data on behalf of the data subject. Initially, the controller denied the request, citing doubts about the data subject's identity. Later, the controller asked the data subject to pay EUR 135 to process the data access request, on the grounds that it had been excessive or manifestly unfounded. Finally, the controller failed to adequately inform data subjects about data processing due to the absence of a privacy policy on the controller's website or another method of informing data subjects.
Related Enforcement Actions (0)
No other enforcement actions found for Law Firm in BE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
8 May 2026
Authority
Autorité de Protection des Données
Fine Amount
€4,920
Enforcement Tracker ID
ETid-3145
About this data
Cite as: Cookie Fines. Law Firm - Belgium (2026). Retrieved from cookiefines.eu
Last updated: