Court case AWB - 18 _ 3073 – Court Ruling (Netherlands, 2018)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Dutch court ordered an employer to pay €300 in damages for sharing sensitive employee data without a valid reason. The data ended up with a small group of professionals who were supposed to keep it confidential. This case shows that even if data is shared with trusted parties, unauthorized sharing can still lead to privacy violations.
What happened
An employer shared sensitive employee data with third parties without a valid reason.
Who was affected
Employees whose sensitive data was shared with third parties.
What the authority found
The court ruled that the employer violated data protection rules by sharing sensitive data without a valid reason, awarding €300 in damages.
Why this matters
This ruling highlights that employers must have a valid reason to share sensitive data, even with trusted parties, and that unauthorized sharing can lead to compensation claims.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The employer communicated sensitive data (pro justicia reports) to third parties without a legal basis and asked for damages. These were refused by the employer in the first place. The court order the employer (the Minister of Justice) to pay 300 # of damages for violation of the data protection legislation, considering that the privacy-sensitive personal data have ended up with a small group of professionals, i.e. employees and members of the Disciplinary Board, and that they have a duty of confidentiality by virtue of their position. This does not detract from the fact that the plaintiff's privacy has been violated and that this has understandably been perceived by the plaintiff as unpleasant and disadvantageous. All things considered, the court deems compensation of €300 to be fair.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case AWB - 18 _ 3073 in NL
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
19 December 2018
Authority
DPA RbGelderland
About this data
Cite as: Cookie Fines. Court case AWB - 18 _ 3073 - Netherlands (2018). Retrieved from cookiefines.eu
Last updated: