- Enforcing jurisdiction
- Belgium · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
DPA case 72/2026 – Dismissed (Belgium, 2026)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A customer complained that a company sent them unpaid invoices meant for other customers. The Belgian DPA found no evidence that the customer received these invoices and decided the complaint was not valid. This case shows that not all complaints lead to action if there's insufficient evidence.
What happened
A customer claimed they received invoices intended for other customers from a company.
Who was affected
The customer who received the invoices and other customers whose invoices were mistakenly sent.
What the authority found
The DPA dismissed the complaint due to lack of evidence and concluded that there was no significant issue.
Why this matters
This case highlights the importance of having clear evidence when filing complaints. Companies should ensure their mailing processes are accurate to avoid similar issues.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A customer (the data subject) of a company (the controller) filed a complaint with the Belgian DPA (APD) claiming that the controller sent them via postal mail several unpaid invoices pertaining to other customers. The data subject destroyed the invoices that were intended for other customers. Firstly, the DPA held that in the absence of the invoices, it was unable to verify if the data subject actually received the invoices intended for other customers. Secondly, the DPA noted that it was not possible to verify whether those invoices related to natural persons. Therefore, the DPA was unable to conclude if the processing of personal data fell within the application of Article 2(1) GDPR. Finally, the DPA accepted the controller’s claim that this was a one-time human error and noted that there was no evidence of a recurring issue with the controller’s mailings. Therefore, the DPA dismissed the complaint.
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 72/2026 in BE
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 72/2026 - Belgium (2026). Retrieved from cookiefines.eu
Last updated: