Court case SGR 22/2863 – Court Ruling (Netherlands, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Dutch court ruled that an employee insurance agency was right to deny a person's request for access to an anonymous tip that led to an investigation. The court decided that protecting the tipster's identity was more important than the individual's request. This case shows that sometimes privacy concerns can outweigh personal access rights.
What happened
The Dutch Employee Insurance Agency denied a person's request to access an anonymous tip related to their benefits investigation.
Who was affected
A person whose sickness benefits were investigated by the Dutch Employee Insurance Agency.
What the authority found
The court upheld the agency's decision, stating that protecting the anonymity of the tipster was justified under Dutch law.
Why this matters
This ruling illustrates the balance between individual access rights and the need to protect the privacy of others. Companies must navigate these complexities when handling data requests.
GDPR Articles Cited
National Law Articles
In the decision leading to the appeal, the Dutch Employee Insurance Agency, the controller, refused to grant the data subject access to an anonymous tip, which led to an investigation into their sickness (ZW) benefits. The investigation revealed that the data subject had failed to comply with the duty to provide information, resulting in the recovery of €6,010 in unlawfully paid ZW benefits and a fine of €253.33. Following the request of their file, the data subject received all documents except the anonymous tip. The controller argued that the data subject’s interests were not harmed by the tip, stating that it was the investigation, not the anonymous tip, which constituted the direct cause for the recovery and the fine. Article 7(6)(i) Dutch Access and correction rights regulation ([https://zoek.officielebekendmakingen.nl/stcrt-2018-28604.html Regeling inzage en correctierecht UWV 2018]) (hereinafter: the Dutch Access and correction rights regulation), based on the GDPR, further allows for the controller to deny the data subject’s request to access where this is necessary and proportionate to protect the rights and freedoms of others. The data subject claimed ongoing harassment by an anonymous tipster, involvement in the childcare benefits scandal, issues with national institutions, privacy violations by the controller, and finally, an intent to initiate civil proceedings against the tipster. The controller responded by clarifying that the tipster wished to remain anonymous, constituting a situation where the general public interest in maintaining anonymity and ensuring continued reporting outweighs the personal interest of the data subject. The Court ruled that the controller’s decision to deny the data subject’s request is justified. The Court recognised that, under Article 7(6)(i) Dutch Access and correction rights regulation, a request for access may be partially or fully denied if it is necessary and proportionate to protect the rights and freedoms of
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case SGR 22/2863 in NL
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case SGR 22/2863 - Netherlands (2023). Retrieved from cookiefines.eu
Last updated: