Court case 202203653/1/A3 – Court Ruling (Netherlands, 2024)

Court Ruling
DPA RbMidden-Nederland13 November 2024Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Dutch court ruled that the Tax Administration lawfully processed a person's data during a tax investigation. The court found that the data was used for a valid public interest purpose, so the request to erase it was denied. This case shows that government agencies can use personal data if it's necessary for their duties.

What happened

The Tax Administration processed personal data of a person suspected of tax evasion during an investigation.

Who was affected

The individual whose personal data was analyzed by the Tax Administration.

What the authority found

The court held that the Tax Administration complied with GDPR and the Law Enforcement Directive in processing the data.

Why this matters

This ruling clarifies that government agencies can process personal data for public interest tasks. It reminds individuals that their data may be retained for legitimate investigations.

GDPR Articles Cited

AI-verified

Art. 17(GDPR)
Art. 6(1)(e) GDPR
View original scraped data
Art. 6(GDPR)
Art. 17(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Article 9 of the Law Enforcement Directive
Decision AuthorityAdministrative Jurisdiction Division of the Council of State (ABRvS)
Reviewed AuthorityDistrict Court of Central Netherlands (Rb. Midden-Nederlands)
Source verified 17 April 2026
articles corrected
national law identified
authority corrected
Full Legal Summary
Detailed

The data subject’s personal data was processed by the Tax Administration because it suspected him of not fulfilling his tax obligations. This suspicion was raised after the Fiscal Information and Investigation Service (FIOD) had carried out a criminal investigation into the data subject’s tax advisor. During the investigation, the FIOD drew on the assistance of three employees of the Tax Administration and data on the customer's of the tax advisor under investigation, including the personal data of the data subject, were analysed during the proceedings. The data subject requested the erasure of their data under Article 17 GDPR but the request was rejected by the controller, the Minister of Finance. In the Netherlands, the Tax Administration forms part of the Ministry of Finance. The data subject argued that the Tax Administration is processing his personal data for a purpose other than the purpose for which the FIOD initially collected the data. The data subject appealed the Minister's decision to the District Court of Central Netherlands (Rb. Midden-Nederlands) which held that the controller had complied with both the requirements of the GDPR as well as the Law Enforcement Directive. The data subject appealed this decision to the Administrative Jurisdiction Division of the Council of State (Afdeling Bestuursrechtspraak van de Raad van State – ABRvS). The court determined that since the data had been collected for the purpose of the detection of criminal offences, it had to consider whether the disclosure of data by the FIOD to the Tax Administration was permissible. It stated that under [https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32016L0680 Article 9 of the Law Enforcement Directive], further processing of personal data is permissible if authorised by EU law. The court held that the further processing of data fell under the remit of the GDPR as the Tax Administration fulfills a task which is in the public interest. The court reiterated the Distri

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 202203653/1/A3 in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

13 November 2024

Authority

DPA RbMidden-Nederland

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 202203653/1/A3 - Netherlands (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: