Enforcement · Belgian Data Protection Authority (APD) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

EU DisinfoLab: Non-compliance with general data processing principles

€2,800 Fine
EU DisinfoLab
BELGIUM
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR Art. 12 GDPR Art. 14 GDPR Art. 30 GDPR Art. 32 GDPR Art. 35 GDPR
Social Media Religious Beliefs Fairness & Transparency IP Address Anonymization Security Automated Decision-Making Marketing
Jan 27, 2022 Source

How it connects

Related across sources

Literature GDPR - General Data Protection Regulation on Sites Requiring Accessibility Innovative STEM Education Guidance Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them EDPB Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB Literature The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how Przegląd Prawniczy Uniwersytetu im. Adam Mickiewicza Case Law Meta Platforms v noyb CJEU News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet

Full text

The Belgian DPA has fined the NGO EU DisinfoLab EUR 2,700. In 2018, the NGO published an analysis to identify the possible political origin of tweets circulating on a particularly heated controversy in France, the 'Benalla affair.' For the analysis, the organization had processed the data of 55,000 Twitter accounts, of which more than 3,300 had been classified as political. The raw data obtained from this was then published without taking minimal security precautions, such as pseudonymizing the data. The DPA noted that publication of the data could potentially expose data subjects to the risk of discrimination or discredit because of the non-anonymized political profiling. In addition, the files also contained information about the religious beliefs, ethnic origin, or sexual orientation of the individuals whose accounts were analyzed. For this reason, the DPA concluded that several obligations of the GDPR, such as lawfulness of processing, transparency to data subjects, and data security, were violated.

Industry: Individuals and Private Associations

Original document at the source www.autoriteprotectiondonnees.be

Similar Content