Court case UTR 24/4233 – Court Ruling (Netherlands, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The data subjects held health insurance with a provider. After failing to meet their payments and incurring medical expenses, a civil claim was initiated between the data subjects and their insurance provider. During the course of the proceedings, third-party stakeholders were allowed to submit financial and medical documents for consideration by the court which concerned the data subjects. On June 1st 2023, the data subjects filed a complaint with the AP (Dutch DPA), alleging that the third parties were wrongfully allowed to provide the documents in the civil proceedings. The DPA assessed the data subject’s complaint but did not conduct a full investigation, claiming firstly that the complaint was not a GDPR issue, and secondly, that the DPA cannot act sufficiently effectively to resolve the dispute. After the data subject’s objection, the DPA examined the complaint. The DPA assessed the necessity of inclusion of the medical and financial documents by the third party and found that there existed a legitimate interest. In September 2023, the DPA rejected the data subject’s claims that the processing of these files was prohibited on the grounds of Article 9 GDPR, noting that the processing was necessary for the substantiation of a legal claim. The data subjects appealed this decision to the District Court of Central Netherlands. In their appeal, they sought that the DPA’s decision be overturned and that they be provided compensation for the unlawful use of their personal data. The data subjects claimed that the documents, by their nature, should disallow their inclusion in the court proceedings by the third party. The documents reveal the medical service which the data subject’s have used and also reveal the specific medication taken by one of them. The Public Prosecutor issued their advice to the Supreme Court. The Public Prosecutor advised that the third parties did hold a legitimate interest for the inclusion of the documents in the civil proceedings. The Pub
GDPR Articles Cited
The data subjects held health insurance with a provider. After failing to meet their payments and incurring medical expenses, a civil claim was initiated between the data subjects and their insurance provider. During the course of the proceedings, third-party stakeholders were allowed to submit financial and medical documents for consideration by the court which concerned the data subjects. On June 1st 2023, the data subjects filed a complaint with the AP (Dutch DPA), alleging that the third parties were wrongfully allowed to provide the documents in the civil proceedings. The DPA assessed the data subject’s complaint but did not conduct a full investigation, claiming firstly that the complaint was not a GDPR issue, and secondly, that the DPA cannot act sufficiently effectively to resolve the dispute. After the data subject’s objection, the DPA examined the complaint. The DPA assessed the necessity of inclusion of the medical and financial documents by the third party and found that there existed a legitimate interest. In September 2023, the DPA rejected the data subject’s claims that the processing of these files was prohibited on the grounds of Article 9 GDPR, noting that the processing was necessary for the substantiation of a legal claim. The data subjects appealed this decision to the District Court of Central Netherlands. In their appeal, they sought that the DPA’s decision be overturned and that they be provided compensation for the unlawful use of their personal data. The data subjects claimed that the documents, by their nature, should disallow their inclusion in the court proceedings by the third party. The documents reveal the medical service which the data subject’s have used and also reveal the specific medication taken by one of them. The Public Prosecutor issued their advice to the Supreme Court. The Public Prosecutor advised that the third parties did hold a legitimate interest for the inclusion of the documents in the civil proceedings. The Pub
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case UTR 24/4233 in NL
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case UTR 24/4233 - Netherlands (2025). Retrieved from cookiefines.eu
Last updated: