Enforcement · Belgian Data Protection Authority (APD) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Non-profit organisation: Insufficient fulfilment of data subjects rights

€1,000 Fine
Non-profit organisation
BELGIUM
Art. 6 GDPR Art. 21 GDPR
Right to Object Right to be Forgotten Legitimate Interest Direct Marketing Consent Data Subject Rights Exercise Modalities and Procedures Marketing Personal Data
May 29, 2020 Source

How it connects

Related across sources

Case Law Google Spain SL and Google Inc. v AEPD and Mario Costeja González CJEU Case Law HvJ EU 9 januari 2025, C‑394/23 (Mousse). CJEU Case Law VwGH - Ro 2022/04/0026 Austrian Administrative Supreme Court Guidance EDPB Annual Report 2021 EDPB Case Law GC and Others v CNIL CJEU Case Law Google LLC v CNIL CJEU

Full text

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Industry: Individuals and Private Associations

Original document at the source www.gegevensbeschermingsautoriteit.be

Similar Content