SAMEN VEILIG MIDDEN-NEDERLAND – Court Ruling (Netherlands, 2020)

Court Ruling
DPA RbMidden-Nederland2 December 2020Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Dutch court ruled that Samen Veilig must provide a parent with the names of employees who accessed her son's file. The court decided that just giving job titles wasn't enough for transparency. This ruling emphasizes the right to know who accesses personal data.

What happened

Samen Veilig refused to provide the names of employees who accessed a child's file, offering only job titles instead.

Who was affected

The parent of a child whose file was accessed by multiple employees.

What the authority found

The court held that Samen Veilig must provide the full log files, including employee names, to ensure transparency.

Why this matters

This decision underscores the importance of transparency in data access and may influence how organizations handle similar requests.

GDPR Articles Cited

Art. 15 GDPR
Art. 23 GDPR
Decision AuthorityRb. Midden-Nederland
Full Legal Summary
Detailed

In December 2016 the director of the school of the complainant's son filed a report with the child protective service. In December 2017 the report was investigated and closed after the consultation with the parents of the minor. In March 2020 the complainant filed a request with Samen Veilig, asking to provide her with copies of all complete log overviews, including all names of persons who have had access to the file of her son. Samen Veilig responded that it would provide the job titles of the employees, but not their names. Must Samen Veilig provide the names of the employees who have had access to the file of the complainant's son? The Court ruled that Samen Veilig did not strike the right balance in their assessment of interests. Samen Veilig has a valid interest of restricting access to the employee information to protect their privacy, when it's necessary for the exercise of their tasks or to investigate or end a (suspected) child abuse. However, these exceptions apply only in individual cases. In this specific case, it has not been asserted that there is any reason to believe that the complainant might misuse the information that will be provided to her. The mere mentioning of job title does not suffice and limits the complainant in the possibility to check whether the access to the file was lawful. Samen Veilig must provide complainant with the requested log files, including names of employees and access time stamps.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for SAMEN VEILIG MIDDEN-NEDERLAND in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

2 December 2020

Authority

DPA RbMidden-Nederland

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. SAMEN VEILIG MIDDEN-NEDERLAND - Netherlands (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: