Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

OLVG – Court Ruling (Netherlands, 2021)

Court Ruling
Autoriteit Persoonsgegevens31 March 2021Netherlands
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Dutch court reduced a fine against OLVG, a private hospital, after it improved its data protection measures. The hospital was initially fined for not having adequate security in place. This case shows that taking steps to enhance data security can lead to more favorable outcomes in legal situations.

What happened

The court reduced a fine imposed on the hospital after it improved its security measures.

Who was affected

Patients of OLVG whose personal data was at risk due to inadequate security measures.

What the authority found

The District Court of The Hague acknowledged the hospital's efforts to enhance its data protection and reduced the fine accordingly.

Why this matters

This ruling highlights the importance of continuously improving data security practices. Other healthcare providers should take note and prioritize the protection of patient information.

Recorded legal citations
Automatically processed
Art. 32(1) GDPR
Art. 32(2) GDPR
Art. 33(1) GDPR
View original scraped data
Art. 32(1) GDPR
Art. 32(2) GDPR
Art. 33(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Article 6(2) UAVG
Decision AuthorityRb. Den Haag
Reviewed AuthorityAP (The Netherlands)

Source checks

Linked-source text retrieved.

Automated check recorded — 17 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The District Court of The Hague reduced a fine imposed on a private hospital by the Dutch DPA from €460,000 to €350,000 after the hospital improved its technical and organizational measures during the appeal phase. The Court also noted that the Dutch DPA has the power to interpret and give substance to Article 32 GDPR.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Details

Ruling Date

31 March 2021

Authority

Autoriteit Persoonsgegevens

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. OLVG - Netherlands (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: