Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation

Voorschoten municipality – €30,000 Fine (Netherlands, 2023)

€30,000Autoriteit Persoonsgegevens2 November 2023Netherlands
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The municipality of Voorschoten in the Netherlands was fined for keeping waste collection data longer than necessary and not informing residents properly. This is important because it shows that municipalities must handle personal data responsibly. Local governments should review their data retention practices.

What happened

Voorschoten municipality was fined EUR 30,000 for retaining household waste data longer than necessary and failing to inform residents.

Who was affected

Residents of Voorschoten who were affected by the municipality's data handling practices.

What the authority found

The authority ruled that the municipality violated GDPR rules by not properly managing personal data and failing to inform residents.

Why this matters

This case emphasizes the need for municipalities to follow data protection laws. Local governments should ensure they are transparent and compliant in their data practices.

Recorded legal citations
Automatically processed
Art. 5(1)(a) GDPR
Art. 6(1)(e) GDPR
Art. 14(1)(c) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(1) e) GDPR
Art. 14(1) c) GDPR
d) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 13 March 2026.

Processing notes: articles corrected, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Dutch DPA has imposed a fine of EUR 30,000 on Voorschoten municipality. The municipality had kept information about household waste for longer than necessary and had not sufficiently informed residents. In 2018 and 2019, the municipality of Voorschoten had replaced the waste garbage cans for houses and the underground containers for apartments. These bins were fitted with chips with numbers that were linked to a house address. The aim was to increase the collection of separate waste by limiting the amount of residual waste that residents could dispose of. However, the municipality stored the waste collection data of households for too long. For example, garbage can data was kept for as long as it was in use and underground container token data was stored for five years. According to the DPA, this is much longer than is necessary to check whether a household is exceeding the permitted amount. In addition, the municipality did not sufficiently inform residents about the use of their personal data when collecting waste.

Related Enforcement Actions (0)

No other enforcement actions found for Voorschoten municipality in NL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 November 2023

Authority

Autoriteit Persoonsgegevens

Fine Amount

€30,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Voorschoten municipality - Netherlands (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: