Stichting Jeugdbescherming regio Amstedam – Court Ruling (Netherlands, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A mother requested her personal data from a youth protection agency, but some internal notes were withheld. The court decided these notes were not personal data under GDPR. This ruling clarifies that internal thoughts and deliberations aren't always subject to data access rights.
What happened
The youth protection agency withheld internal notes when providing a mother with her personal data.
Who was affected
A mother seeking access to her personal data held by a youth protection agency.
What the authority found
The court ruled that internal notes are not personal data under GDPR and the request was not aligned with GDPR's purpose of verifying data accuracy and lawful processing.
Why this matters
This decision clarifies that internal notes and deliberations may not be accessible under GDPR, helping organizations understand the limits of data access requests.
GDPR Articles Cited
A minor has been placed under supervision of the Amsterdam Centre for Youth and Family (Stichting Jeugdbescherming regio Amsterdam; the defendant). The mother (plaintiff) requests a copy of the complete file from the defendant containing her personal data. The defendant provides the requested data, but removes some phrases and didn’t provide internal notes. Are internal notes and correspondence containing personal data subject to article 15 GDPR? The court ruled that the plaintiff did not provide enough indications to contradict the statement of the defendant that the removed phrases did not contain personal data. The request to provide the removed phrases is denied. The court rules that the internal notes and correspondence must be qualified as personal thoughts from employees which are only intended for internal consultation and deliberation and therefore can’t be qualified as personal data in the sense of the GDPR. Besides, the purpose of the request is not consistent with the purpose of Article 15 GDPR. The request was made in relation to a family dispute, while the purpose of Article 15 GDPR is to enable data subjects to verify whether their personal data is correct and to verify whether their personal data is processed lawfully. The request is denied.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Stichting Jeugdbescherming regio Amstedam in NL
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Stichting Jeugdbescherming regio Amstedam - Netherlands (2020). Retrieved from cookiefines.eu
Last updated: