# Infobel: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Belgian Data Protection Authority (APD)
- Date: 2025-11-27
- Original: https://www.enforcementtracker.com/ETid-2948
- Canonical: https://overview.legal/posts/49063
- Topics: Marketing, Controllers, Direct Marketing, Personal Data, Processing, Processing Agreement, Data Controller, Supervisory Authorities

## Summary

The Belgian DPA has imposed a fine of EUR 40,000 on Infobel. The controller, a data broker, sold personal data for direct marketing purposes. However, it processed the data it had sold without a sufficient legal basis.

## Full text

The Belgian DPA has imposed a fine of EUR 40,000 on Infobel. The controller, a data broker, sold personal data for direct marketing purposes. However, it processed the data it had sold without a sufficient legal basis.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 24 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/49063 · 2026-08-22