Press releases

Belgian DPA fines data broker

The Belgian DPA decided today to impose a fine of €40,000 on data broker Infobel for reselling data obtained from a telecom operator for marketing purposes without the valid consent of the person concerned. The Belgian DPA also requires Infobel to inform its corporate customers of this decision.
 

The Belgian DPA publishes its Annual Report 2024

The Belgian DPA publishes its Annual Report 2024, a year marked by internal reorganization as a result of the amendment of its organic law and the adoption of new internal rules of procedure. 2024 was also marked by awareness-raising initiatives and interactions with actors in the field, particularly during colloquia and events organized by the Belgian DPA.

The Market Court rules in the IAB Europe case

Today, the Market Court (Court of Appeal) has ruled in the case between the Belgian Data Protection Authority and IAB Europe, exercising its full jurisdiction. Although decision 21/2022 is annulled for procedural reasons, the Market Court endorses the reasoning of the Belgian DPA and confirms the fine of 250,000 euros imposed. However, the Court rejects the BE DPA's conclusion that IAB Europe acts as (joint) data controller for the processing operations that take place entirely within the OpenRTB protocol.

The Belgian DPA publishes its Annual Report 2023

2023 has been a year of renewal for the Belgian DPA. On the one hand, its Executive Committee has been completed with the appointment of two new directors in June, and on the other, the law organising its operations has been amended.

IAB EUROPE case: The CJEU answers the questions referred for a preliminary ruling

The Court of Justice of the European Union (CJEU) published today its ruling in the case opposing the Belgian Data Protection Authority and IAB EUROPE.

In its decision, the Court holds, as argued by the Belgian DPA in its decision 21/2022, that a structured character string capturing internet users' preferences such as IAB EUROPE's TC string can indeed be considered as personal data, and that IAB EUROPE can be qualified as a (joint) controller of users' preferences for online advertising.