Stay informed with the latest guidelines, recommendations, and decisions from the European Data Protection Board (EDPB) and the Belgian Data Protection Authority.
Updated daily • All documents available for download
Showing 1-20 of 81 updates
Belgian DPA
Décision quant au fond n° 209/2025 du 18 décembre 2025
{"context":"The decision by the Belgian Data Protection Authority (DPA) addresses a case involving unauthorized access to sensitive health data by a physiotherapist within a hospital setting. The case highlights the challenges of managing access to e...
Data ProtectionHealthcare DataAccess ControlTransparencyGDPR Compliance
Décision quant au fond n° 206/2025 du 8 décembre 2025
{"context":"The decision 'Décision quant au fond n° 206/2025 du 8 décembre 2025' by the Belgian Data Protection Authority (DPA) addresses compliance issues related to Freedelity, a company involved in data processing activities. This decision follows...
Data MinimizationConsent ManagementData RetentionGDPR ComplianceData Controller Responsibilities
Décision quant au fond n° 205/2025 du 8 décembre 2025
{"context":"The decision 'Décision quant au fond n° 205/2025 du 8 décembre 2025' by the Belgian Data Protection Authority (DPA) addresses a complaint filed against CAW Oost-Vlaanderen regarding the processing of personal data, specifically focusing o...
Right of AccessTransparencyData Protection Officer (DPO)Supervisory AuthorityAccountability
Décision quant au fond n° 204/2025 du 8 décembre 2025
{"context":"The decision by the Belgian Data Protection Authority (DPA) addresses the unlawful processing of personal data by CAW Oost-Vlaanderen, specifically the use of national identification numbers from the Belgian National Register without the ...
GDPR complianceData processing authorizationNational identification numbersLegal basis for processingTransparency and information obligationsData protection impact assessmentsRecord of processing activities
Recommendations 2/2025 on the legal basis for requiring the creation of user accounts on e-commerce websites
This is a regulatory update from EDPB titled "Recommendations 2/2025 on the legal basis for requiring the creation of user accounts on e-commerce websites". Automated summary generation failed. Please review the original document for details.
Décision quant au fond n° 200/2025 du 28 novembre 2025
{"context":"The decision 'Décision quant au fond n° 200/2025 du 28 novembre 2025' by the Belgian Data Protection Authority (DPA) addresses a complaint regarding the right of access under the GDPR. The case involves a complainant who requested access ...
Right of AccessArticle 15 GDPRData Subject RightsCompliance with GDPRProportionality and Justification
Décision quant au fond n° 199/2025 du 27 novembre 2025
{"context":"The decision 'Décision quant au fond n° 199/2025' by the Belgian Data Protection Authority (DPA) addresses a case involving Infobel, a data broker accused of processing personal data for direct marketing without valid consent. The case hi...
ConsentData ProcessingData Controller ResponsibilitiesGDPR ComplianceAdministrative Fines
Décision quant au fond n° 188/2025 du 19 novembre 2025
{"context":"The decision n° 188/2025 by the Belgian Data Protection Authority (DPA) addresses a complaint regarding unauthorized access to the National Registry by employees of a municipal administration. The complaint was filed by an individual repr...
AccountabilityData Protection Officer (DPO)Access ControlTechnical and Organizational MeasuresPublic Authority Compliance
Décision quant au fond n° 181/2025 du 12 novembre 2025
This is a regulatory update from Belgian DPA titled "Décision quant au fond n° 181/2025 du 12 novembre 2025". Automated summary generation failed. Please review the original document for details.
Décision quant au fond n° 163/2025 du 10 octobre 2025
{"context":"The decision by the Belgian Data Protection Authority (DPA) addresses a case involving the unlawful processing of municipal contact data for direct marketing purposes by a mayor. The case highlights issues of data protection compliance wi...
Legal Basis for ProcessingTransparencyDirect MarketingData Protection Officer (DPO)Public Sector Compliance
Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
{"context":"The European Data Protection Board (EDPB) and the European Commission have collaborated to create Joint Guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR). These guidelines ...
Data ProtectionUser ConsentTransparencyRegulatory ComplianceDigital Market Regulation
Décision quant au fond n° 158/2025 du 7 octobre 2025
{"context":"The decision by the Belgian Data Protection Authority (DPA) addresses the improper handling of personal data by a company after the termination of an employee's contract. The case focuses on the retention and processing of the employee's ...
Purpose LimitationData MinimizationStorage LimitationRight to ErasureLegal Basis for Processing
Décision quant au fond n° 157/2025 du 7 octobre 2025
{"context":"The decision n° 157/2025 by the Belgian Data Protection Authority (DPA) addresses a complaint regarding the failure to respond to a request for data rectification and access. The case involves a complainant who received incorrect billing ...
Data Subject RightsRight to RectificationTransparencyAccountabilityGDPR Compliance
Décision quant au fond n° 151-2025/2025 du 22 septembre 2025
{"context":"The decision from the Belgian Data Protection Authority (DPA) addresses the misuse of personal data by a political entity for election propaganda. The case arose when a complainant received unsolicited election-related emails, prompting a...
Legal Basis for ProcessingPurpose LimitationTransparency and Information ObligationsData Subject RightsGDPR Compliance in Political Campaigns
Décision quant au fond n° 150-2025/2025 du 19 septembre 2025
{"context":"The decision 'Décision quant au fond n° 150-2025/2025 du 19 septembre 2025' by the Belgian Data Protection Authority (DPA) addresses a case involving the improper handling of personal data in internal communications. The case arose from a...
TransparencyFairnessLegitimate InterestData MinimizationPrivacy PolicyInternal CommunicationsAccountabilityData Subject Rights
Guidelines 3/2025 on the interplay between the DSA and the GDPR
{"context":"The European Data Protection Board (EDPB) has released Guidelines 3/2025 to address the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR). These guidelines aim to clarify the responsibiliti...
TransparencyData Protection Impact Assessment (DPIA)Privacy by DesignAccountabilityConsumer Trust
Décision quant au fond n° 142/2025 du 4 septembre 2025
{"context":"The decision by the Belgian Data Protection Authority (DPA) concerns the unlawful use of surveillance cameras in and around a student residence. This case highlights the enforcement of GDPR compliance related to the processing of personal...
GDPR Article 5 - Principles relating to processing of personal dataGDPR Article 6 - Lawfulness of processingGDPR Article 30 - Records of processing activitiesData minimizationLawful basis for processing
Décision quant au fond n° 138/2025 du 1 septembre 2025
This is a regulatory update from Belgian DPA titled "Décision quant au fond n° 138/2025 du 1 septembre 2025". Automated summary generation failed. Please review the original document for details.
Décision quant au fond n° 134/2025 du 21 août 2025
{"context":"The decision n° 134/2025 by the Belgian Data Protection Authority (DPA) addresses issues related to data processing responsibilities within corporate structures, particularly focusing on the roles of parent and subsidiary companies. The c...
Data Controller ResponsibilitiesData Subject RightsAccess to Personal DataLegal Basis for ProcessingCorporate Data Processing
Décision quant au fond n° 133/2025 du 19 août 2025
{"context":"The decision 'Décision quant au fond n° 133/2025 du 19 août 2025' by the Belgian Data Protection Authority (DPA) addresses the processing of personal data for election-related direct marketing. The case involved a complaint against a Flem...
ConsentTransparencyDirect MarketingLawfulness of ProcessingData Subject Rights
The European Data Protection Board (EDPB) is an independent European body that contributes to the consistent application of data protection rules throughout the European Union and promotes cooperation between EU data protection authorities.
About Belgian DPA
The Belgian Data Protection Authority (Autorité de protection des données) is the supervisory authority for data protection in Belgium, responsible for monitoring compliance with GDPR and national data protection laws.
Need help understanding these updates?
Our GDPR compliance experts can help you interpret regulatory changes and assess their impact on your organization.