ARTICLE · 27 APRIL 2023

Enorme AVG Boetes Voor Facebook, Instagram En WhatsApp

DMCC Group

Explore more from DMCC Group

De Ierse privacy toezichthouder DPC heeft Facebook, Instagram en WhatsApp deze maand boetes opgelegd van respectievelijk 210, 180 en 5,5 miljoen euro.

NetherlandsPrivacy

Jitty van Doodewaerd

De Ierse privacy toezichthouder DPC heeft Facebook, Instagram en WhatsApp deze maand boetes opgelegd van respectievelijk 210, 180 en 5,5 miljoen euro. De toezichthouder concludeert dat de organisaties de AVG overtreden door gebruikers te dwingen in te stemmen met gepersonaliseerde advertenties en het verbeteren van dienstverlening in de algemene voorwaarden, terwijl dit niet noodzakelijk is voor de dienstverlening. 'Uitvoering van de overeenkomst' is dus geen juiste rechtsgrondslag voor het verwerken van die persoonsgegevens. De boetes komen niet als een verrassing want de Ierse privacy toezichthouder werd hier min of meer toe gedwongen door de Europese toezichthouders. Meta, het moederbedrijf van WhatsApp, krijgt 3 tot 6 maanden de tijd om de praktijk aan te passen en heeft al aangekondigd in beroep te gaan.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

EU KIDS Act: What Digital Service Providers Need To Know

European UnionPrivacy

A New Sanction Against Uber Based On Automated Decision-Making

NetherlandsPrivacy

[Blog] Foot Et Contrefaçon

European UnionPrivacy

Novagraaf Netherlands BV

CJEU Publishes An Updated Fact Sheet Summarising Key Case Law On Protection Of Personal Data

European UnionPrivacy

CJEU Issues Judgment On Balancing The Right Of Access And Protecting Trade Secrets In Automated Decision-Making Processes

European UnionPrivacy

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

A New Sanction Against Uber Based On Automated Decision-Making

The Dutch Data Protection Authority has imposed a record-breaking €824.99 million fine on Uber for violating GDPR Article 22 through automated decision-making systems that deactivate driver accounts without meaningful human intervention. This landmark enforcement action, stemming from a 2020 class-action complaint filed on behalf of 170 Uber drivers, marks the third and most severe penalty against the ride-sharing giant for data protection violations.

NetherlandsPrivacy

Yahoo Faces Over 50 Lawsuits After Major Data Breaches

Yahoo suffered three significant data breaches affecting more than 1.7 billion users between 2012 and 2014.

De Brauw Blackstone Westbroek

CJEU Publishes An Updated Fact Sheet Summarising Key Case Law On Protection Of Personal Data

On April 28, 2025, the Court of Justice of the European Union (CJEU) published an updated version of the fact sheet (the Fact Sheet)...

European UnionPrivacy

CJEU Issues Judgment On Balancing The Right Of Access And Protecting Trade Secrets In Automated Decision-Making Processes

On February 27 2025, the Court of Justice of the European Union (CJEU) delivered a judgment in CK v Dun & Bradstreet (Case C-203/22).

European UnionPrivacy

Court Suspends Dutch Telecom Data Retention Act

Dutch telecom and internet providers are no longer required to retain the telephone and internet traffic data of their customers.

NetherlandsPrivacy

De Brauw Blackstone Westbroek

EU KIDS Act: What Digital Service Providers Need To Know

The European Commission has proposed the EU KIDS Act, introducing an EU-wide framework for minors' access to digital services through age-based restrictions and safety-by-design requirements. The proposal establishes tiered access rules for social media and video-sharing platforms, with independent accounts prohibited under age 13, guardian supervision required for ages 13-15, and autonomous access permitted from age 15. Digital service providers will need to navigate complex age assurance requirements whil

European UnionPrivacy

Privacy & Information Security Law Blog: Dutch DPA Publishes 2018 Report On Data Breach Statistics

On January 29, 2019, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, the "Dutch DPA") published a report (in Dutch) on the personal data breach notifications received in 2018

NetherlandsPrivacy

Hunton Andrews Kurth LLP

290 Million Reasons To Comply: Fine Imposed On Uber For Non-Compliant Third-Party Transfers

The Data Protection Authority in the Netherlands recently imposed a €290 million fine on Uber for breaching the EU GDPR requirement to have adequate transfer mechanisms in place...

NetherlandsPrivacy

Shepherd and Wedderburn

Getting Ready For The Digital Services Act: The Netherlands ACM Publishes For Consultation Its Draft DSA Guidelines

The European Union (EU) has introduced a landmark regulation known as the Digital Services Act (DSA).

European UnionPrivacy

WHOIS Has Been Replaced By RDAP: How Do The Two Systems Compare?

Overseen by the Internet Corporation for Assigned Names and Numbers (ICANN), the WHOIS protocol has been used since the early days of the internet to retrieve relevant information...

European UnionPrivacy

Novagraaf Netherlands BV