Details:
| Summary | The Belgian DPA has imposed a fine of EUR 174,640 on Black Tiger Belgium. An individual had filed a complaint with the DPA due to the controller’s failure to properly comply with their request to exercise their right of access. During its investigation, the DPA further found that the controller had processed personal data in various databases without sufficiently informing the data subjects. The DPA also found that the data retention period of 15 years was excessively long and not necessary. Finally, the DPA found that the company’s register of processing activities lacked information. |
| Link: | link link |
| Related articles: | Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 14 GDPR, Art. 15 GDPR Art. 24 GDPR, Art. 25 GDPR, Art. 30 GDPR |
| Type: | Insufficient fulfilment of information obligations |
| Fine: | EUR 174,640 |
| Sector | Industry and Commerce |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/