Court case C/13/770276 / HA ZA 25-1129 – Court Ruling (Netherlands, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The controller is a national newspaper that published an article reporting on the criminal conviction of the data subject for the sexual exploitation of two underage girls. The article included information about the criminal proceedings and identified the data subject by name, while omitting his surname. The data subject initiated civil proceedings against the controller, arguing that the publication unlawfully interfered with his right to privacy and data protection, in particular under Article 10 GDPR. He claimed that the disclosure of his identity and professional background made him easily identifiable and caused disproportionate reputational harm. He further argued that the offence was relatively minor and did not justify such intrusive reporting. The controller argued that it had acted within its journalistic freedom and fulfilled its duty to inform the public about serious criminal offences. It maintained that sufficient care had been taken to limit identification by omitting the data subject’s surname and that the reporting was accurate, balanced, and in the public interest. The Court rejected the data subject’s claims and held that the publication was lawful. The Court carried out a balancing exercise between the data subject’s right to respect for private life under Article 8 ECHR and the controller’s freedom of expression under Article 10 ECHR, as required when applying Article 10 GDPR. It found that the balance weighed in favour of the controller. In particular, the Court held that the article was based on accurate and established facts, namely a criminal conviction. The disclosure contributed to a debate of general public interest, as sexual exploitation of minors, especially in the context of online platforms, raises serious societal concerns, regardless of the data subject’s characterisation of the offence as “light”. The Court further considered the data subject’s professional background and found that mentioning his profession was justified, as it
GDPR Articles Cited
The controller is a national newspaper that published an article reporting on the criminal conviction of the data subject for the sexual exploitation of two underage girls. The article included information about the criminal proceedings and identified the data subject by name, while omitting his surname. The data subject initiated civil proceedings against the controller, arguing that the publication unlawfully interfered with his right to privacy and data protection, in particular under Article 10 GDPR. He claimed that the disclosure of his identity and professional background made him easily identifiable and caused disproportionate reputational harm. He further argued that the offence was relatively minor and did not justify such intrusive reporting. The controller argued that it had acted within its journalistic freedom and fulfilled its duty to inform the public about serious criminal offences. It maintained that sufficient care had been taken to limit identification by omitting the data subject’s surname and that the reporting was accurate, balanced, and in the public interest. The Court rejected the data subject’s claims and held that the publication was lawful. The Court carried out a balancing exercise between the data subject’s right to respect for private life under Article 8 ECHR and the controller’s freedom of expression under Article 10 ECHR, as required when applying Article 10 GDPR. It found that the balance weighed in favour of the controller. In particular, the Court held that the article was based on accurate and established facts, namely a criminal conviction. The disclosure contributed to a debate of general public interest, as sexual exploitation of minors, especially in the context of online platforms, raises serious societal concerns, regardless of the data subject’s characterisation of the offence as “light”. The Court further considered the data subject’s professional background and found that mentioning his profession was justified, as it
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case C/13/770276 / HA ZA 25-1129 in NL
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case C/13/770276 / HA ZA 25-1129 - Netherlands (2025). Retrieved from cookiefines.eu
Last updated: