APD/GBA News (Belgium DPA)

Belgian DPA Orders Diocese to Delete Baptized Person's Data

The Belgian Data Protection Authority (DPA) has ordered the diocese of Ghent to delete a baptized person's data from the baptismal register. The DPA ruled that the church's legitimate interest in retaining the data does not override the individual's right to erasure under GDPR when they expressly wish to leave the church.

CJEU Rules on IAB EUROPE Case, Belgian DPA Fine

The Court of Justice of the European Union (CJEU) ruled that a structured character string capturing user preferences is personal data and that IAB EUROPE can be considered a joint controller. This decision impacts the Belgian DPA's prior €250,000 fine against IAB EUROPE.

Market Court confirms €250,000 DPA fine in IAB Europe case

The Market Court has confirmed a €250,000 fine imposed by the Belgian Data Protection Authority on IAB Europe. While the original decision was annulled on procedural grounds, the court upheld the reasoning that IAB Europe acts as a joint data controller for user preferences within its Transparency and Consent Framework.

Market Court refers FATCA data transfer questions to CJEU

The Belgian Market Court has referred 13 preliminary questions to the Court of Justice of the European Union (CJEU) regarding the FATCA agreement and data transfers to the US. This action seeks clarification on the compatibility of the agreement with EU data protection laws, including GDPR and Directive 95/46/EC.