Yards Deurwaardersdiensten B.V – Court Ruling (Netherlands, 2022)

Court Ruling
DPA RbMidden-Nederland2 February 2022Netherlands
final
ePrivacy
Court Ruling

The Dutch Supreme Administrative Court found that a financial regulator wrongly shared non-anonymized documents with a journalist. This was considered a privacy breach, and the court ordered the regulator to reconsider its decision not to report it. This highlights the importance of anonymizing sensitive information before sharing.

What happened

A financial regulator shared non-anonymized documents with a journalist, which was deemed a privacy breach.

Who was affected

The company and individuals named in the documents shared with the journalist.

What the authority found

The court ruled that sharing non-anonymized documents without consent was a privacy breach and required the regulator to reconsider its decision.

Why this matters

This ruling underscores the necessity for organizations to anonymize personal data before disclosure to third parties. It serves as a reminder to ensure compliance with privacy laws when handling sensitive information.

GDPR Articles Cited

Art. 21 GDPR
Art. 4(1) GDPR
Art. 82 GDPR

National Law Articles

Article 1(3) Awb
Article 34 UAVG
Article 6(4)(1) Awb
Article 8(88) Awb
Wet bescherming bedrijfsgeheimen
Decision AuthorityRvS
Reviewed AuthorityRb. Midden-Nederland (Netherlands)
Full Legal Summary
Detailed

The Dutch financial regulator, Bureau Financieel Toezicht (BFT), provided a journalist with a copy of a decision and an accompanied letter. The decision and letter had been issued by the Chamber of Bailiffs (kamer voor gerechtsdeurwaarders) in a disciplinary proceeding against a company. The BFT provided the journalist with the documents without anonymizing them. The company and two individuals (the plaintiffs) complained that this was a data breach under the GDPR. The plaintiffs demanded that it should be reported to the Dutch DPA Autoriteit Persoonsgegevens (AP). In December 2019, the BFT informed the plaintiffs that there was no need to report the incident as a data breach under the GDPR. The plaintiffs complained. In January 2020, the BFT ruled that the complaint was inadmissible, meaning that the plaintiffs didn't have the right to have the action reviewed by a court. The plaintiffs appealed the BFTs decision to declare the complaint inadmissible. In June 2020, the District Court of Midden-Nederland ruled on the appeal. The District Court reversed the BFT's January 2020 decision and ordered the BFT to issue a new decision on the objection. In addition, the District Court ruled that, as an administrative court, it didn't have jurisdiction to decide on compensation issues. The applicants appealed the District Court's decision to the Supreme Administrative Court (Raad van State). BFT filed an incidential appeal, which is an appeal filed after an opposing party has already filed an appeal. The Supreme Administrative Court held a hearing in October 2021. At the hearing, it became clear that the plaintiffs and BFT now agree that it was wrong to disclose the documents to the journalist without anonymizing them. The Supreme Administrative Court now had to answer three questions: 1) Were there any legal remedies against the BFT's decision? 2) Does an administrative court have jurisdiction to decide on applications for compensation? 3) Should the request for compensat

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Yards Deurwaardersdiensten B.V in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

2 February 2022

Authority

DPA RbMidden-Nederland

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0

Cite as: Cookie Fines. Yards Deurwaardersdiensten B.V - Netherlands (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: