Enforcing jurisdiction
Belgium · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Company – €2,500 Fine (Belgium, 2022)

€2,500Autorité de Protection des Données23 August 2022Belgium
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A company in Belgium was fined EUR 2,500 for failing to protect personal data on its digital management platform. An individual complained that their information was accessible to someone who should not have seen it. This ruling serves as a warning to companies about the importance of data security.

What happened

The Belgian DPA fined a company for not adequately protecting personal data on its digital platform.

Who was affected

Individuals whose personal information was exposed on the company's platform.

What the authority found

The authority found that the company did not take appropriate measures to safeguard personal data, allowing unauthorized access.

Why this matters

This decision underscores the responsibility of companies to secure user data on digital platforms. It reminds businesses to regularly review their security practices to prevent unauthorized access.

Recorded legal citations
Automatically processed
Art. 5(1)(d) GDPR
Art. 5(2) GDPR
Art. 24(1) GDPR
Art. 32(1) GDPR
View original scraped data
Art. 5(1) d) GDPR
Art. 5(2) GDPR
Art. 24(1) GDPR
Art. 32(1) GDPR
(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Belgian DPA has imposed a fine of EUR 2,500 on a company. The company operates a digital management platform where suppliers and customers can communicate and upload administrative documents. An individual, who is not themselves a member of the platform, had filed a complaint with the DPA. Since the complainant's roommate is a member of the platform, the complainant asked them to upload the joint water bill, which was in the complainant's name. The platform recognized the complainant's name and sent the roommate an invitation to connect with additional companies through the platform where the complainant was a customer. Although the roommate did not accept the invitation, they were able to view various data concerning the complainant. The DPA found that the company had failed to implement appropriate technical and organizational measures to protect personal data, in order, for example, to prevent easy access to third-party data.

Related Enforcement Actions (0)

No other enforcement actions found for Company in BE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

23 August 2022

Authority

Autorité de Protection des Données

Fine Amount

€2,500

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Company - Belgium (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: