DPA case 51/2024 (fingerprinting provider) – Warning (Belgium, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A US fingerprinting service received a warning from the Belgian DPA for potential GDPR violations related to its website. The service was found to assign persistent identifiers to visitors without clear legal grounds. This warning highlights the need for companies to ensure their data practices comply with privacy laws.
What happened
The Belgian DPA issued a warning to a US fingerprinting service for potential GDPR compliance issues.
Who was affected
Website visitors who may have been assigned persistent identifiers without proper legal justification.
What the authority found
The DPA raised concerns about the service's legal basis for data processing and required a response regarding remedial actions.
Why this matters
This warning serves as a caution for companies using tracking technologies to ensure they have a valid legal basis for data processing. It reflects ongoing scrutiny of privacy practices in the digital space.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On 2 April 2024 the Belgian DPA’s Litigation Chamber issued a prima facie warning in decision 51/2024, DOS-2023-03422, to an anonymised US fingerprinting-service provider. Its website demo assigned visitors a persistent identifier; the initial assessment raised potential problems with the legal basis, privacy information, reuse of rights-request contact information for marketing and absence of an EU representative. The adopted order on page 6 warns of possible breaches of GDPR Articles 5(1)(a), 5(1)(b), 6, 13, 15, 17 and 27 and requires a response within 30 days explaining remedial steps and representative appointment. The reasoning did not establish a definite Article 17 breach because the email correspondence and any erasure exception were unclear. The warning is provisional under Article 95 WOG, subject to merits reconsideration; no fine was imposed. It must not be presented as a definitive finding that all third-party uses of the technology are unlawful.
Outcome
Warning
A formal warning issued by a DPA without a monetary penalty.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 51/2024 (fingerprinting provider) in BE
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 51/2024 (fingerprinting provider) - Belgium (2024). Retrieved from cookiefines.eu
Last updated: