GDPR Fine in Belgium: €1,000 Penalty for Non-Compliance Highlights Importance of Data Subject Rights

The Belgian Data Protection Authority (DPA) has issued a €1,000 fine against a data controller for serious breaches of the General Data Protection Regulation (GDPR). The controller failed to respond to a citizen’s legitimate request to object to the processing of their personal data for marketing purposes, violating Article 15.3 GDPR, which outlines data subject rights to object. Furthermore, the DPA penalized the controller for a complete lack of cooperation with the authority during the investigation, contravening Article 31 GDPR, which mandates cooperation with supervisory authorities.

This penalty follows a prior injunction from the Belgian DPA, demanding the controller address the data subject’s objection and inform the DPA of the actions taken. Ignoring this initial order, the controller demonstrated a blatant disregard for GDPR regulations and the DPA’s authority when later questioned about their non-compliance. This “cavalier attitude,” as described by the DPA, combined with the established infringement of the fundamental right to object, directly led to the imposition of the €1,000 fine.

When considering data privacy fines, individuals and organizations might ask, “1.000 Euro Ne Kadar?” – how much is €1,000? While the precise equivalent in other currencies fluctuates with exchange rates, this case from the Belgian DPA underscores a crucial point: GDPR compliance is not merely about avoiding massive fines in the millions. Even seemingly smaller penalties, like this €1,000 fine, are actively enforced to ensure fundamental data subject rights are respected and that organizations engage constructively with data protection authorities. This case serves as a reminder that all aspects of GDPR, including responding to data subject requests and cooperating with DPAs, are taken seriously by European regulators.

For those interested in the details of this decision, the full text (in French) is available [link to PDF]. Further inquiries can be directed to the Belgian DPA at [email address].