GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Website operator

Country
Belgium
Fine
15,000 EUR
Date
2019-12-17
Sector
Public Sector
Articles
Art. 6 and 7 GDPR, andArt. 12 and 13 GDPR

Insufficient legal basis for data processing (no lawful consent); and violation of transparency obligations

The administrative fine was imposed by the Litigation Chamber of the Belgian Data Protection Authority for failure to comply with cookie legislation. The website initially provided false information in its privacy policy, which was furthermore unavailable in the website's own languages. The site also used third party analytics cookies ("Google Analytics", "Google Tag Manager" and "Google Adsense") without valid consent via a cookie banner - consent boxes were already ticked. Authority: Belgian Data Protection Authority (GBA-APD)