Researcher

€1,200

Non-compliance with general data processing principles

Fecha de la decisión

27 de enero de 2022

Autoridad

Belgian Data Protection Authority (APD)

BE

Sector

Individuals and Private Associations

País

BE

Ley

GDPR

Estado

FINAL

Descripción

The Belgian DPA has fined a researcher EUR 1,200. The fine was issued in connection with another fine against the NGO EU DisinfoLab. The researcher was employed at the NGO. In 2018, the NGO published an analysis to identify the possible political origin of tweets circulating on a particularly heated controversy in France, the 'Benalla affair.' For the analysis, the organization had processed the data of 55,000 Twitter accounts, of which more than 3,300 had been classified as political. The raw data obtained from this was then published without taking minimal security precautions, such as pseudonymizing the data. The DPA noted that publication of the data could potentially expose data subjects to the risk of discrimination or discredit because of the non-anonymized political profiling. In addition, the files also contained information about the religious beliefs, ethnic origin, or sexual orientation of the individuals whose accounts were analyzed. For this reason, the DPA concluded that several obligations of the GDPR, such as lawfulness of processing, transparency to data subjects, and data security, were violated.

Citas legales

Art. 5 (1)Art. 6 (1)Art. 9Art. 12Art. 14Art. 32

Problemas e infracciones

Non-compliance with general data processing principles

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.