🇪🇺 Dutch Supervisory Authority for Data Protection (AP)
43 decisions · €135.8M total fines · THE NETHERLANDS →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2022-01-14 | DPG Media Magazines B.V. Insufficient fulfilment of data subjects rights | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 12 | €525,000 |
| 2021-11-25 | Dutch Minister of Finance Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6Art. 8 | €2,750,000 |
| 2021-11-12 | Transavia Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €400,000 |
| 2021-05-31 | UWV (Dutch employee insurance service provider) Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €450,000 |
| 2021-04-09 | TikTok Insufficient fulfilment of information obligations | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 12 | €750,000 |
| 2021-03-11 | Municipality of Enschede Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6 | €600,000 |
| 2021-02-11 | OLVG Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €440,000 |
| 2021-02-04 | Orthodontic Clinic Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €12,000 |
| 2020-12-20 | Locatefamily.com Non-compliance with general data processing principles | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 27 | €525,000 |
| 2020-12-10 | Booking.com B.V. Insufficient fulfilment of data breach notification obligations | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 33 | €475,000 |
| 2020-07-06 | Bureau Krediet Registration ('BKR') Insufficient fulfilment of data subjects rights | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 12Art. 15 | €830,000 |
| 2020-06-16 | PVV Overijssel Insufficient fulfilment of data breach notification obligations | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 33 | €7,500 |
| 2020-04-30 | Unknown Organisation Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 9 | €725,000 |
| 2020-03-24 | CP&A Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 9Art. 32 | €15,000 |
| 2020-03-03 | Royal Dutch Tennis Association ('KNLTB') Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6 | €525,000 |
| 2019-10-31 | UWV (Dutch employee insurance service provider) Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €900,000 |
| 2019-10-31 | Menzis (Health Insurance Company) Non-compliance with general data processing principles | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5 | €50,000 |
| 2019-06-18 | Haga Hospital Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €350,000 |
← previous 26–43 of 43