Family service – Court Ruling (Belgium, 2021)

Court Ruling
Autorité de Protection des Données7 July 2021Belgium
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Belgian company that sells gift boxes to new mothers was fined for not handling personal data properly. They appealed, but the court upheld the decision, saying the company didn't prove it had consent to use the data. This case shows that companies must be clear and fair when collecting personal data.

What happened

A company was fined for not processing personal data in a fair, lawful, and transparent manner.

Who was affected

Customers of the company offering gift boxes to expectant mothers, whose personal data was mishandled.

What the authority found

The court upheld the Belgian DPA's decision, stating the company failed to demonstrate valid consent for data processing.

Why this matters

This ruling emphasizes the need for companies to have clear consent and transparent data practices. It serves as a warning that failing to meet these requirements can lead to penalties, even if appealed.

GDPR Articles Cited

Art. 6 GDPR
Art. 12 GDPR
Art. 13 GDPR
Art. 14 GDPR
Art. 31 GDPR
Art. 5(1)(a) GDPR
Decision AuthorityCourt of Appeal of Brussels
Reviewed AuthorityAPD/GBA (Belgium)
Full Legal Summary
Detailed

On 27 January 2021 the Belgian DPA imposed an administrative fine of 50.000 EUR on plaintiff (a company that offers gift boxes to (expectant) mothers) for not complying with the core data protection principles of processing personal data in a fair, lawful and transaparent manner. The plaintiff appealed the decision and claimed that several procedural principles have been violated in the decision of the Belgian DPA. Both parties referred to former decisions of the litigation chamber or the Court of Appeal to support their positions. However, according to the Court of Appeal, unlike the Anglo-saxon system, the Belgian legal system does not assign any binding precedent value to decisions. The most important aspects are shortly described hereafter: * Violation of rights of defence Although the litigation chamber admits that the file was not fully complete when the case was initiated, the Court stated that plaintiff did not report during the proceedings that documents were still missing afterwards, and therefore that plaintiff did not sufficiently demonstrate that its rights on this point were violated. * Violation of duty to state reasons (facts/violations) Plaintiff argues that the Belgian DPA can only base its decision on reasons whose factual existence has been duly proven. The court reminds the parties that it is not up to the court to re-examine the facts and substitute its views to the ones of the Belgian DPA. It can only verify whether the facts on which the decision is based are accurate. * Violation of duty to state reasons (legal basis) Plaintiff complained about the content and motivation of the contested decision with regard to 'consent' or 'legitmate interest' as a legal basis, but the court clearly states that the plaintiff could not sufficiently demonstrate that the consent met all the requirements (free, specific, unambiguous, informed). The Court also points to the absence of a 'balancing test' in which plaintiff had objectively considered beforeha

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Family service in BE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

7 July 2021

Authority

Autorité de Protection des Données

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Family service - Belgium (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: