- Enforcing jurisdiction
- Netherlands · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Autoriteit Persoonsgegevens (Dutch DPA) – Court Ruling (Netherlands, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A court ruled on a complaint against the Dutch DPA regarding an investigation into privacy issues with public transport chip cards. The court found that the DPA had adequately addressed the concerns raised. This ruling reinforces the importance of thorough investigations in data protection cases.
What happened
The court assessed whether the Dutch DPA sufficiently investigated privacy concerns related to anonymous chip cards.
Who was affected
A complainant who raised concerns about privacy issues with anonymous public transport chip cards.
What the authority found
The court held that the Dutch DPA had sufficiently investigated the issues and acted appropriately regarding privacy policies.
Why this matters
This ruling emphasizes the need for data protection authorities to conduct thorough investigations. It also highlights the importance of clear policies in protecting user privacy.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The complainant wanted the Dutch DPA to open an investigation concerning (1) identification issues when handing in an anonymous chip card and being reimbursed the sum; (2) a perceived attempt to mislead the complainant as a customer that identification would be mandatory when purchasing tickets at the station counter for all international train journeys within the EU; and (3) charging service costs when topping up an anonymous public transport chip card using cash. The dispute in front of the court was whether the decision to reject the investigation for the three issues was sufficiently grounded. The court assessed each of the three issues seperately. The first issue was whether the DPA sufficiently investigated whether the costumer was identified on reimbursement of the balance of a non-registered OV chip card. The court highlighted that the Dutch DPA showed in the investigation that it was not a policy of the Dutch Railways to record personal data, and that the issue of privacy was brought to the attention of employees during courses and training. In addition, Dutch Railways explained that their computer system did not allow personal data to be recorded when a non-registered public transport chip card was returned. Based on this, the Dutch DPA was able to conclude that the Dutch Railways acted sufficiently adequate with their policy and did not record any personal details of the identification shown. As such, the Court found the issue to be sufficiently investigated. The second issue was whether the DPA sufficiently investigated the procedure for purchasing an international train ticket. The court highlighted that according to the employee handbook, a customer buying an international ticket is not required to give up personal data. The complainant highlighted that the employee in fact asked for personal data when the complainant bought a ticket. However, as noted by the DPA, a deviation from the handbook by one of the employees was not sufficient to lau
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (1)
Other cases involving Autoriteit Persoonsgegevens (Dutch DPA) in NL
Details
Ruling Date
4 February 2020
Authority
DPA RbGelderland
About this data
Cite as: Cookie Fines. Autoriteit Persoonsgegevens (Dutch DPA) - Netherlands (2020). Retrieved from cookiefines.eu
Last updated: