Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

GGD Flevoland – Court Ruling (Netherlands, 2019)

Court Ruling
DPA RbMidden-Nederland13 November 2019Netherlands
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A court ruled that a City Council did not have to provide access to a person's medical files because the files were destroyed after a support request was denied. The ruling clarifies who is responsible for handling personal data in public health matters. This case shows the importance of keeping records properly.

What happened

The City Council refused to provide access to personal data related to a social support application.

Who was affected

The claimant who requested access to their son's personal data during the social support application process.

What the authority found

The court decided that the City Council's refusal was legitimate since the personal data had already been destroyed.

Why this matters

This case emphasizes the need for public entities to manage personal data responsibly and maintain records for transparency.

Recorded legal citations
Automatically processed
Art. 15 GDPR
Art. 4(7) GDPR
View original scraped data
Art. 4(7) GDPR
Art. 15(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityRvS
Reviewed AuthorityRb. Midden-Nederland (Netherlands)

Source checks

Linked-source text retrieved.

Automated check recorded — 17 March 2026.

Processing notes: articles corrected, national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The claimant’s son applied for social support at home. Following the application, the City Public Health Department investigated and addressed a recommendation on whether the social support should be granted to the City Council. The City Council decided to not grant the social support. Then, the claimant requested a copy of the files processed during the application process, including the son's personal data related to his medical files. The City Council refused to grant the access. Who is the relevant controller? The Court first considered that all public entities involved in the application process and not only the City Council were joint controllers. Thus, the access request regarding the personal data could have been sent to the City Public Health Department as well. Then, the Court considered that the access to the personal data should have been granted by the City Council under the data protection law. However, the City Council already destroyed the personal data after it refused to grant the social support. Therefore, the Court considered that the refusal was legitimate.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for GGD Flevoland in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

13 November 2019

Authority

DPA RbMidden-Nederland

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. GGD Flevoland - Netherlands (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: