# Company: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Belgian Data Protection Authority (APD)
- Date: 2025-04-22
- Original: https://www.enforcementtracker.com/ETid-2613
- Canonical: https://overview.legal/posts/48728
- Topics: Controllers, IP Address, Direct Marketing, Personal Data, Marketing, Processing Agreement, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Belgian DPA imposed a fine of EUR 20,000 on a company. The controller is a company engaging in direct marketing activities. During those activies the company failed to comply with multiple data processing principle. In particular the company had no sufficient legal basis for the data processing, failed to inform the data subjects and failed to provide data subjects with lawfully requested informations.

## Full text

The Belgian DPA imposed a fine of EUR 20,000 on a company. The controller is a company engaging in direct marketing activities. During those activies the company failed to comply with multiple data processing principle. In particular the company had no sufficient legal basis for the data processing, failed to inform the data subjects and failed to provide data subjects with lawfully requested informations.

GDPR Articles: Art. 5 (1) a), (2) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR, Art. 14 (1), (2) GDPR, Art. 15 (1) c), d), g), Art. 24 (1) GDPR, Art. 25 (1) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48728 · 2026-08-22