Press releases
2026
European data protection authorities ask the Belgian DPA to investigate a complaint lodged by NGO NOYB
The EDPB, the body that brings together representatives of all data protection authorities in the European Economic Area (EEA), has decided that the Belgian Data Protection Authority (Belgian DPA) must examine a complaint lodged by the NGO NOYB concerning the cookies placed on the Flemish public broadcaster VRT website. Initially, the Belgian DPA had planned to dismiss the complaint on the basis of relevant Belgian case law, as well as on the grounds of what it considered to be evidence of an abuse of the right to lodge a complaint. However, the EDPB has instructed the Belgian DPA to assess the merits of the case.
2026
The Spanish and Belgian DPAs promote good data protection practices for the video game sector
The Spanish and Belgian data protection authorities publish the document ‘Recommendations and Best Practices for Data Protection in Video Games’, the first one produced by European data protection authorities to promote best practices for ensuring compliance with the General Data Protection Regulation (GDPR) in the design, development and distribution of video games.
2025
Belgian DPA fines data broker
The Belgian DPA decided today to impose a fine of €40,000 on data broker Infobel for reselling data obtained from a telecom operator for marketing purposes without the valid consent of the person concerned. The Belgian DPA also requires Infobel to inform its corporate customers of this decision.
2025
The Belgian DPA publishes its Annual Report 2024
The Belgian DPA publishes its Annual Report 2024, a year marked by internal reorganization as a result of the amendment of its organic law and the adoption of new internal rules of procedure. 2024 was also marked by awareness-raising initiatives and interactions with actors in the field, particularly during colloquia and events organized by the Belgian DPA.
2025
The Market Court rules in the IAB Europe case
Today, the Market Court (Court of Appeal) has ruled in the case between the Belgian Data Protection Authority and IAB Europe, exercising its full jurisdiction. Although decision 21/2022 is annulled for procedural reasons, the Market Court endorses the reasoning of the Belgian DPA and confirms the fine of 250,000 euros imposed. However, the Court rejects the BE DPA's conclusion that IAB Europe acts as (joint) data controller for the processing operations that take place entirely within the OpenRTB protocol.