Enforcing jurisdiction
Belgium · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

DPA case DOS-2025-04652 – Violation Found (Belgium, 2026)

Violation Found
Autorité de Protection des Données8 June 2026Belgium
final
Violation Found

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A search engine in Belgium rejected a request to remove a URL linked to a person's criminal record. This matters because it shows the balance between public interest and personal privacy. The decision reinforces that some information, especially about criminal convictions, may remain accessible online.

What happened

The search engine refused to delete a URL that contained information about a person's criminal convictions.

Who was affected

The individual whose name and criminal record were linked to the URL.

What the authority found

The authority ruled that the public's right to access information outweighed the individual's request for deletion.

Why this matters

This ruling sets a precedent for how similar requests will be handled in the future. It reminds website operators that public interest can sometimes take precedence over personal privacy.

Recorded legal citations
Automatically processed
Art. 10 GDPR
Art. 17(3)(a) GDPR
View original scraped data
Art. 17(3)(a) GDPR
Art. 10(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 October 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The data subject requested from a search engine (controller) the removal of a URL that appears when the data subject’s name is entered into the search engine. The URL points to the official website of the United States federal government for access to official publications. It refers to a judicial decision concerning the enforcement of Belgian orders within the United States and mentions the data subject’s name and states that he was convicted in Belgium in 2020 of forgery, fraud, breach of trust and embezzlement as well as forfeiture of assets in 2021. The data subject requested the de-listing of the URL from the controller but the controller refused to grant the request. Consequently, the data subject lodged a complaint with the DPA, claiming damages to his reputation and negative consequences for his professional situation. The DPA rejected the complaint. According to the DPA, the request of de-listing the URL is to be assessed under the deletion request provided for by Article 17 GDPR. Article 17(3)(a) GDPR requires the DPA to balance the interest of internet users to information with the data subject’s rights when assessing whether the personal data is to be deleted upon the data subject’s request or not. When balancing the interest, regard must be made of the special protection of personal data concerning criminal convictions as provided for by Article 10 GDPR. The DPA held that the interest of the internet users to the information prevailed over the data subject’s rights. Firstly, there was no doubt that the personal data concerned was accurate, the criminal convictions could not be classified as mere allegations but proven facts. Moreover, the information was still relevant since the convictions date back to 2020, its affirmation on appeal to 2021 and the referenced court decision to 2022. Thus, they reflect the current situation and not old facts. The DPA also considered that the convictions did not concern the data subject’s private or intimate lif

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case DOS-2025-04652 in BE

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

8 June 2026

Authority

Autorité de Protection des Données

GDPRhub ID

gdprhub-10230

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case DOS-2025-04652 - Belgium (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: