Dutch DPA
- Country
- Netherlands
- Fine
- 525,000 EUR
- Date
- 2020-03-03
- Sector
- Public Sector
- Articles
- Art. 5 (1)(b)Art. 5 (1)(a) jo.Art. 6 (1) GDPR
The Dutch DPA imposed a fine of 525,000 euros for the unlawful sale of personal data by the Dutch national tennis association the KNLTB.
The Royal Dutch Lawn Tennis Association (KNLTB) provided the sponsors with personal data such as names, gender and addresses, so that they could approach a selection of KNLTB members with tennis related and other offers. One sponsor received personal data from 50,000, the other from more than 300,000 members. These sponsors approached some of those KNLTB members by post or by telephone. In the opinion of the DPA, the KNLTB had no legitimate interest to sell these personal data. The KNLTB argued it did have a legitimate interest to sell personal data of its members. However, the DPA concluded the purely financial interest of the KNLTB was no lawful basis for infringing the basic rights of its members. The members had not given their permission either. The KNLTB lodged an objection to the fine imposed. The objection was decided on by the DPA itself.
Additional information
https://autoriteitpersoonsgegevens.nl/sites/default/files/atoms/files/samenvatting_onderzoek_knltb.pdf