Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

College van burgemeester en wethouders van Leeuwarden – Court Ruling (Netherlands, 2021)

Court Ruling
DPA RbNoord-Nederland4 August 2021Netherlands
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Municipality of Leeuwarden denied a request for access to personal data because the individual did not properly identify himself. The court upheld this decision, stating that verifying identity is crucial when handling personal data requests. This case emphasizes the importance of security in data access.

What happened

The Municipality of Leeuwarden rejected a request for access to personal data due to identity verification issues.

Who was affected

An individual seeking information about data processing related to a waste container was affected.

What the authority found

The court ruled that the Municipality acted correctly by requiring proper identification before granting access to personal data.

Why this matters

This case highlights the necessity for organizations to ensure they verify identities before disclosing personal information, protecting both the individual and the organization.

Recorded legal citations
Automatically processed
Art. 11 GDPR
Art. 15 GDPR
Art. 12(6) GDPR
View original scraped data
Art. 11(GDPR)
Art. 12(6) GDPR
Art. 15(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityRvS (Netherlands)
Reviewed AuthorityRb. Noord-Nederland (Netherlands)

Source checks

Secondary-source text retrieved.

Automated check recorded — 20 March 2026.

Processing notes: articles corrected, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A data subject submitted an an access request to the Municipality of Leeuwaarden concerning information on the collection, processing, and storage of data by the chip card reader attached to the waste container at his home address. The request included the following words: "Yours faithfully but with kind regards,: [appellant name]: I AM Without Prejudice UCC 1-308 Beneficiary, Authorized Agent and Representative for the legal fiction [appellant name]" In response, the Municipality asked the data subject to submit his request online and signed with his DigiD within 14 days, or to identify himself at the town hall with a valid identification document. DigiD is an identity management platform used by government agencies in the Netherlands. The Municipality explained that the request concerns personal data, which must not be provided to the wrong person, and it is therefore important to properly establish the data subject's identity. Indeed, Recital 64 GDPR states that the controller should take all reasonable steps to verify the identity of a data subject requesting access. And, following Article 12(6) GDPR, if there is reason to doubt the identity, additional information may be requested that is necessary to confirm the identity of the data subject. When the data subject did not identify himself in the way it requested, the Municipality issued a decision stating it would not consider his request. The data subject lodged an objection to this decision, which the Municipality declared unfounded. On 2 October 2020, the District Court of Northern Netherlands dismissed an appeal by the data subject regarding the Municipality's decision to reject his request. The data subject ('appellant') then appealed to the Council of State. The appellant argued that the District Court erroneously ruled that the Municipality could reasonably doubt his identity and could therefore ask him to identify himself. In particular, this is because the Municipality had previ

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for College van burgemeester en wethouders van Leeuwarden in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

4 August 2021

Authority

DPA RbNoord-Nederland

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. College van burgemeester en wethouders van Leeuwarden - Netherlands (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: