DPA case 01/2022 (private employment agency) – Reprimand (Belgium, 2022)

Reprimand
Autorité de Protection des Données3 January 2022Belgium
unknown
Reprimand

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An employment agency received a reprimand for failing to erase a candidate’s data, despite confirming deletion. Separate complaints about vacancy registration and the candidate portal were dismissed. No fine was imposed.

What happened

Vacancy emails continued after the candidate requested erasure and the agency confirmed it had deleted the data.

Who was affected

An anonymised Belgian private employment agency, not the job applicant.

What the authority found

Failure to facilitate and implement erasure infringed Articles 12(2), 17(1) and 24 GDPR. The Chamber issued a reprimand and dismissed the separate registration and portal-account allegations.

Why this matters

An isolated employee error and later remediation can mitigate the sanction without eliminating an established erasure infringement.

GDPR Articles Cited
Automatically processed
Art. 24 GDPR
Art. 5(2) GDPR
Art. 12(2) GDPR
Art. 17(1) GDPR
View original scraped data
Article 12(2) GDPR
Article 17(1) GDPR
Article 24 GDPR
Article 5(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Review needed — 18 October 2026.

Processing notes: articles corrected, source review conflict.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

On 3 January 2022 the Belgian DPA’s Litigation Chamber issued decision 01/2022, DOS-2020-01182, concerning an anonymised private employment agency. The agency failed to implement a candidate’s erasure request: despite confirming deletion on 3 March 2020, its offices sent vacancy emails that afternoon and again on 15 April 2020. The Chamber found infringements of Articles 12(2), 17(1) and 24 GDPR and issued a reprimand; paragraph 49 also addresses accountability under Article 5(2). A one-off employee error, later deletion and remedial measures mitigated the sanction but did not remove the infringement. The Chamber dismissed the separate challenges to the original vacancy-mail registration and the creation of the candidate portal account: it did not establish unlawful or insufficiently transparent processing on those grounds. No administrative fine was imposed. Judicial appeal remained possible; this source alone does not establish finality.

Outcome

Reprimand

A formal reprimand: the DPA found a violation and issued a formal censure.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case 01/2022 (private employment agency) in BE

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

3 January 2022

Authority

Autorité de Protection des Données

GDPRhub ID

gdprhub-4616

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case 01/2022 (private employment agency) - Belgium (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: