May 20, 2020 |
On 19 May 2020, the Belgian Data Protection Authority published two new decisions of the BDPA’s Litigation Chamber, each handing down a fine for infringements of the GDPR.
The two cases were very different, but the combination makes for interesting lessons in relation to consent and legitimate interests. Other topics covered include the processing of health-related data, the use of “invite/tell-a-friend” functionality, whether to publish a DPIA and what to check in a privacy statement.
Compliments of NautaDutilh – a member of the EACCNY.