Enforcement · Belgian Data Protection Authority (APD) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Bank: Insufficient involvement of data protection officer
The Belgian DPA has imposed a fine of EUR 75,000 on a bank.
Full text
The Belgian DPA has imposed a fine of EUR 75,000 on a bank. The DPA identified a conflict of interest regarding the data protection officer. In addition to his work as data protection officer, he was also head of a department to which he had to report in his capacity as data protection officer. The DPA considered this to be a violation of Art. 38 (6) GDPR.
Industry: Finance, Insurance and Consulting
How it connects
References
Related across sources
Opinion 9/2019 Austrian data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR Opinion ·EDPB Jul 12, 2019 Codes of Conduct Supervision Supervisory Authorities
Opinion 1/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR ·Opinion ·EDPB Feb 17, 2023 Codes of Conduct Supervision Supervisory Authorities
C-288/12 Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per The European Commission brought an infringement action against Hungary before the Court of Justice (Grand Chamber) under Article 258 TFEU, alleging that Hungary violated Article… CJEU Apr 8, 2014 Supervision Supervisory Authorities Personal Data
Opinion 24/2021 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 24 / 20 21 on the draft decision of the competent supervisory authority of Slovakia regarding the approval of the requirements for accreditation of a code of… ·Opinion ·EDPB Jul 20, 2021 Codes of Conduct Supervision Supervisory Authorities
Opinion 18/2020 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 18 / 20 20 on the draft decision of the competent supervisory authority of t he Netherlands regarding the approval of the requirements for accreditation of a… ·Opinion ·EDPB Jul 23, 2020 Codes of Conduct Supervision Supervisory Authorities
Opinion 13/2020 the draft decision of the competent supervisory authority of Italy regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 13 / 20 20 on the the draft decision of the competent supervisory authority of Italy regarding the approval of the requirements for accreditation of a code of… Opinion ·EDPB May 25, 2020 Codes of Conduct Supervision Supervisory Authorities