Voorschoten municipality – €30,000 Fine (Netherlands, 2023)

€30,000Autoriteit Persoonsgegevens2 November 2023Netherlands
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Voorschoten municipality was fined €30,000 for keeping waste collection data longer than needed and not informing residents properly. The Dutch data protection authority found that the municipality stored personal data for too long, which could harm residents' privacy. This case serves as a reminder for local governments to manage personal data responsibly.

What happened

Voorschoten municipality stored household waste collection data for longer than necessary.

Who was affected

Residents whose waste collection data was stored by the municipality were affected.

What the authority found

The authority decided that the municipality violated rules by retaining personal data longer than required and failing to inform residents adequately.

Why this matters

This case shows that municipalities must be transparent about data usage and limit data retention. Local governments should establish clear data management policies to protect residents' privacy.

GDPR Articles Cited

Art. 5(1)(a) GDPR
Art. 6(1)(e) GDPR
Art. 14(1)(c) GDPR
Full Legal Summary
Detailed

The Dutch DPA has imposed a fine of EUR 30,000 on Voorschoten municipality. The municipality had kept information about household waste for longer than necessary and had not sufficiently informed residents. In 2018 and 2019, the municipality of Voorschoten had replaced the waste garbage cans for houses and the underground containers for apartments. These bins were fitted with chips with numbers that were linked to a house address. The aim was to increase the collection of separate waste by limiting the amount of residual waste that residents could dispose of. However, the municipality stored the waste collection data of households for too long. For example, garbage can data was kept for as long as it was in use and underground container token data was stored for five years. According to the DPA, this is much longer than is necessary to check whether a household is exceeding the permitted amount. In addition, the municipality did not sufficiently inform residents about the use of their personal data when collecting waste.

Related Enforcement Actions (0)

No other enforcement actions found for Voorschoten municipality in NL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 November 2023

Authority

Autoriteit Persoonsgegevens

Fine Amount

€30,000

Enforcement Tracker ID

ETid-2132

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Voorschoten municipality - Netherlands (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: