NautaDutilh: Belgium, two new EUR fines for tell-a-friend and health-related GDPR violations

May 20, 2020 |

On 19 May 2020, the Belgian Data Protection Authority published two new decisions of the BDPA’s Litigation Chamber, each handing down a fine for infringements of the GDPR.

The two cases were very different, but the combination makes for interesting lessons in relation to consent and legitimate interests. Other topics covered include the processing of health-related data, the use of “invite/tell-a-friend” functionality, whether to publish a DPIA and what to check in a privacy statement.

CONTINUE READING…

AUTHORS:
Peter Craddock
Eline Van Bogget
Vincent Wellens

Compliments of NautaDutilh – a member of the EACCNY.