The Data Protection Authority (GBA) has imposed a GDPR fine of 174,640 euros on Black Tiger Belgium and is demanding corrective measures.

According to the GBA, Black Tiger Belgium (formerly Bisnode Belgium) has violated the GDPR rules. The company, which specializes in big data and data management, collected and processed personal data indirectly on a large scale. Those involved were not informed about this proactive way of working for a long period of time.

After repeatedly failing to respond adequately to questions, the GBA took action after violations were also found in maintaining a register of processing activities.

Hielke Hijmans, Chairman of the GBA’s Dispute Resolution Chamber: “The long-standing violations of the principles of lawfulness, fairness and transparency in the processing and commercialization of data are serious violations as they deprive data subjects of full control over their personal data.”

“It is therefore important to impose a strict but proportionate penalty, the dissuasive nature of which will sustainably improve the data protection of Belgians.”

Black Tiger Belgium informs Belga that there is a “legitimate interest” in processing the data. The company has 30 days to file an appeal.