Enforcing jurisdiction
Belgium · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Court case 2023/AR/801 – Court Ruling (Belgium, 2023)

Court Ruling
Autorité de Protection des Données28 June 2023Belgium
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Belgian court suspended a decision that banned the transfer of tax data for accidental US citizens living in Belgium. The court found that the decision could harm Belgium's international commitments. This ruling allows the data transfer to continue while the case is reviewed further.

What happened

The Belgian court suspended a ban on transferring tax data of accidental US citizens to the US.

Who was affected

Accidental US citizens residing in Belgium whose tax data was affected by the decision.

What the authority found

The court ruled that the ban on data transfer could cause serious harm to Belgium's international relations and commitments.

Why this matters

This case highlights the balance between data protection and international obligations. It shows that courts can prioritize international agreements over data privacy in certain situations.

Recorded legal citations
Automatically processed
View original scraped data
Art. 96(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityC.A.
Reviewed AuthorityAPD/GBA (Belgium)

Source checks

Linked-source text retrieved.

Automated check recorded — 21 March 2026.

Processing notes: national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

On 24 May 2023, the Belgian DPA issued a decision in which it ordered a ban on the transfer of tax data of accidental US citizens residing in Belgium to the US. Despite the fact that Article 96 GDPR provides that agreements concluded prior to GDPR which comply with the EU legislation at the time of their conclusion are still valid under GDPR, the DPA considered the FATCA agreement as not in line with the GDPR (see GDPRhub summary). The controller filed an appeal with the Appeal Court requesting that the decision be suspended and annulled. The Court indeed has jurisdiction to suspend a decision if, prima facie, it appears that the decision could be annulled and if the immediate execution of the decision is likely to cause serious harm that would be difficult to repair. The controller argued that the decision violated Article 96 GDPR by holding that the FATCA agreement was invalid and that its execution caused serious harm to Belgium's international reputation and relations. The Court considered that, contrary to the interpretation of the DPA, Article 96 GDPR does not provide for a time limit on the validity of international agreements concluded prior to the GDPR. In addition, the Court held that if the decision was not suspended, the Belgian State would not be able to meet its commitments to the USA, i.e. to transfer the data before 30 September. The contested decision placed the Belgian State at odds with its international commitments, whereas Article 27 of the Vienna Convention on the Law of Treaties states that a party may not invoke the provisions of its domestic law to justify its failure to perform a treaty. The Court then carried out a balance of interests and considered that although the transfer of the data potentially infringed the provisions of the GDPR, the objective was to prevent tax fraud, i.e. an objective of general interest. This objective outweighed the interests of the data subjects. As a result, the Court decided to suspend the DPA's decision pending a ruling on the merits.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 2023/AR/801 in BE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

28 June 2023

Authority

Autorité de Protection des Données

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case 2023/AR/801 - Belgium (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: