Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

DPA case AWB- 21_3909 – €561 Fine (Netherlands, 2022)

€561Autoriteit Persoonsgegevens30 November 2022Netherlands
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Dutch court upheld a college's decision to deny a request for access to work notes related to a data subject's children. The court found that these notes were personal and did not need to be shared. This ruling highlights the importance of privacy in educational settings.

What happened

A data subject requested access to work notes from a college but was denied.

Who was affected

The data subject and her children, who were involved in the case against the college.

What the authority found

The court ruled that the college properly denied access to the work notes because they were personal and not subject to disclosure under GDPR.

Why this matters

This case emphasizes that not all personal data must be shared upon request, particularly when it involves sensitive information. It serves as a reminder for organizations to understand the boundaries of data access requests.

Recorded legal citations
Automatically processed
Art. 15(1) GDPR
View original scraped data
Art. 15(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityRechtbank

Source checks

Archived or cached source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

An appeal by a data subject on a decision not to provide work notes with the files requested under Article 15 GDPR from a College was found unfounded because of the personal nature of said notes. A data subject made a request to obtain an inspected copy of the complete files on said data subject and her children from an officer of a college. The files were provided but the request was denied for work notes of the school attendance officer. The data subject lodged an objection to the College, which was declared unfounded by the officer. The data subject then filed an appeal against the decision. The Court upheld the appeal and annulled the decision of the Officer, leaving the decision to the College. In absence of a decision the data subject filed two letters of default and then appealed for failure to decide in a timely manner. The college then upheld the objection and awarded procedural cost, but still denied the request for inspection of the full files. In turn the Court declared the appeals inadmissible and unfounded but awarded the claimant the legal costs. The Court found that the College had properly denied the request of the data subject for access, holding that the work notes were not available and even if they were do not have to be made available due to their personal nature. In doing so it declared Article 15 (1) GDPR not applicable to the work notes. Furthermore, the appeal for the untimely decision of the College was declared inadmissible, because the College decided on the matter and on penalty payments after the complaint had been lodged and thus the subject lacked sufficient procedural interest in a substantive assessment.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case AWB- 21_3909 in NL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

30 November 2022

Authority

Autoriteit Persoonsgegevens

Fine Amount

€561

GDPRhub ID

gdprhub-6004

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case AWB- 21_3909 - Netherlands (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: