VGZ โ€“ Court Ruling (Netherlands, 2021)

Court Ruling
DPA RbNoord-Holland25 May 2021Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Dutch court ruled that Regenboog pharmacy unlawfully published personal details of VGZ employees in an ad. The pharmacy included names and phone numbers without a legal basis, breaching privacy rules. This case emphasizes the need for businesses to have a valid reason before sharing personal information publicly.

What happened

Regenboog pharmacy published names and work phone numbers of VGZ employees in a newspaper ad without a legal basis.

Who was affected

VGZ employees whose personal details were shared in the pharmacy's ad and letter.

What the authority found

The court found the publication of VGZ employees' personal details unlawful due to a lack of legal basis.

Why this matters

This ruling serves as a warning to companies about the importance of obtaining a valid legal basis before disclosing personal information, reinforcing the need for careful handling of employee data in disputes.

GDPR Articles Cited

Art. 6(1) GDPR
Decision AuthorityRb. Noord-Holland
Full Legal Summary
Detailed

De 'Regenboog Apotheek' (Rainbow pharmacy) is a pharmacy which provides its patients with so-called 'tapering strips'. These strips are used when patients stop taking certain kinds of antidepressants and ADHD-medication, as suddenly stopping can cause severe withdrawal symptoms. Tapering strips need to be made by hand for individual patients, and are therefore expensive. Health insurance company VGZ refuses to pay for these strips despite insistence of the pharmacy that they are legally obliged to do so. This dispute has led to the termination of the contract between the Regenboog pharmacy and VGZ. The pharmacy then placed an ad in a local newspaper, informing their patients that they might need to switch to a different health insurance company. In this ad, the names and work telephone numbers of two employees (who work at the purchasing department of VGZ) were included. In a separate letter to all patients using ADHD-medication, this information was repeated. Was the pharmacy allowed to publish the names of employees of the purchasing department of the health insurance company? The Court ordered the publication of the personal details of the employees unlawful, as a legal basis was missing. The Regenboog pharmacy was ordered to send a follow-up letter to all patients who had illegally received personal details, pointing them to the general customer service number of VGZ.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for VGZ in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

25 May 2021

Authority

DPA RbNoord-Holland

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. VGZ - Netherlands (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: