Technology Company – €177,000 Fine (Belgium, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Belgian technology company was fined €177,000 for not deleting a former employee's email account, which led to personal data being processed without proper legal grounds. This matters because it shows the importance of properly managing employee data and following legal requirements for data deletion.
What happened
The company failed to delete a former employee's email account, allowing personal data to be processed without a valid legal basis.
Who was affected
Former employees whose personal data was still accessible through their deactivated email accounts were affected.
What the authority found
The Belgian DPA found that the company did not have a valid legal basis for processing the personal data, violating several GDPR requirements.
Why this matters
This case highlights the need for companies to ensure they properly delete employee data when it's no longer needed. It serves as a reminder for businesses to review their data management practices.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
Insufficient legal basis for data processing
Related Enforcement Actions (0)
No other enforcement actions found for Technology Company in BE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
12 May 2026
Authority
Autorité de Protection des Données
Fine Amount
€177,000
Enforcement Tracker ID
3172
About this data
Cite as: Cookie Fines. Technology Company - Belgium (2026). Retrieved from cookiefines.eu
Last updated: