DPA case DOS-2025-04652 – Violation Found (Belgium, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A search engine in Belgium rejected a request to remove a URL linked to a person's criminal record. This matters because it shows the balance between public interest and personal privacy. The decision reinforces that some information, especially about criminal convictions, may remain accessible online.
What happened
The search engine refused to delete a URL that contained information about a person's criminal convictions.
Who was affected
The individual whose name and criminal record were linked to the URL.
What the authority found
The authority ruled that the public's right to access information outweighed the individual's request for deletion.
Why this matters
This ruling sets a precedent for how similar requests will be handled in the future. It reminds website operators that public interest can sometimes take precedence over personal privacy.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The data subject requested from a search engine (controller) the removal of a URL that appears when the data subject’s name is entered into the search engine. The URL points to the official website of the United States federal government for access to official publications. It refers to a judicial decision concerning the enforcement of Belgian orders within the United States and mentions the data subject’s name and states that he was convicted in Belgium in 2020 of forgery, fraud, breach of trust and embezzlement as well as forfeiture of assets in 2021. The data subject requested the de-listing of the URL from the controller but the controller refused to grant the request. Consequently, the data subject lodged a complaint with the DPA, claiming damages to his reputation and negative consequences for his professional situation. The DPA rejected the complaint. According to the DPA, the request of de-listing the URL is to be assessed under the deletion request provided for by Article 17 GDPR. Article 17(3)(a) GDPR requires the DPA to balance the interest of internet users to information with the data subject’s rights when assessing whether the personal data is to be deleted upon the data subject’s request or not. When balancing the interest, regard must be made of the special protection of personal data concerning criminal convictions as provided for by Article 10 GDPR. The DPA held that the interest of the internet users to the information prevailed over the data subject’s rights. Firstly, there was no doubt that the personal data concerned was accurate, the criminal convictions could not be classified as mere allegations but proven facts. Moreover, the information was still relevant since the convictions date back to 2020, its affirmation on appeal to 2021 and the referenced court decision to 2022. Thus, they reflect the current situation and not old facts. The DPA also considered that the convictions did not concern the data subject’s private or intimate lif
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case DOS-2025-04652 in BE
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case DOS-2025-04652 - Belgium (2026). Retrieved from cookiefines.eu
Last updated: