- Enforcing jurisdiction
- Belgium · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Court case 2025/AR/253 – Court Ruling (Belgium, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A Belgian court ruled that Mediahuis NV unlawfully transferred personal data during an asset sale. This case is significant because it emphasizes the need for companies to have a valid legal basis for transferring personal data. It serves as a warning for businesses about the importance of transparency in data handling.
What happened
Mediahuis NV transferred a database of personal data without a valid legal basis.
Who was affected
Jobseekers and employers whose personal data was included in the transferred database.
What the authority found
The court found that Mediahuis NV did not properly inform users or establish a valid legal basis for the data transfer.
Why this matters
This ruling reinforces the importance of compliance with data protection laws during business transactions. Companies should ensure they have clear procedures for handling personal data transfers.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 23 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Disputes Chamber of the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit – GBA) adopted a decision concerning Mediahuis NV in connection with an asset deal for the sale of Jobat’s activities. Jobat was a job platform operated within the Mediahuis group, with Mediahuis acting as its controller. In the course of the asset sale, Mediahuis transferred Jobat’s user database, containing personal data of jobseekers and employers, to the buyer, Hors BV. A data subject complained that this transfer was unlawful under the GDPR, as Mediahuis had not identified a valid legal basis or properly informed the affected users. The GBA found that Mediahuis had failed to conduct a proper and documented assessment of the legitimate interest it relied upon under Article 6(1)(f) GDPR. The GBA also found that Mediahuis had not properly informed data subjects as required by Article 5(1)(a), Article 12, and Article 13 GDPR. Mediahuis appealed the decision before the Market Court (Court of Appeal of Brussels). It argued that the GBA had breached the principle of legal certainty , misinterpreted the definition of “processing” under Article 4(2) GDPR, and violated Mediahuis’s rights of defence. Mediahuis also claimed that the GBA had not been consistent with its own dismissal policy and that the complaint constituted an abuse of rights. The Court dismissed the preliminary arguments of Mediahuis. It held that the data subject had not abused their rights and that the GBA retained discretionary power to decide whether or not to dismiss a complaint under Belgium law and Article 57(1)(f) GDPR. The Court clarified that controllers have no “right to dismissal” and that the GBA did not need to justify a decision not to dismiss a complaint. However, the Court found several substantive flaws in the GBA’s decision. It ruled that the Disputes Chamber had given contradictory reasoning by treating the data transfer as both a separate “processing” under Article 4(2) GDPR and a mere step
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 2025/AR/253 in BE
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
3 September 2025
Authority
Autorité de Protection des Données
About this data
Cite as: Cookie Fines. Court case 2025/AR/253 - Belgium (2025). Retrieved from cookiefines.eu
Last updated: