Cybersecurity Policy Report, Software Dealer Violated EU Privacy Law, Belgian Authority Finds, (Dec 2, 2024)
The Belgian data protection authority (DPA) has imposed corrective measures on Freedelity after finding that the Belgian software company failed to get consent for the processing of personal data as required by the European Union’s General Data Protection Regulation (GDPR).
Following an investigation into certain practices of Freedelity, the DPA found consumer consent deficiencies. It noted that for consent to be valid under the GDPR, it must be free, specific, unambiguous, and revocable. But Freedelity could not demonstrate that it received valid consent for personal data processing, the DPA said.
The DPA ordered Freedelity to “put in place compliant consent collection mechanisms, establish direct and accessible mechanisms for the withdrawal of consent,” and erase data retained for more than three years.
Freedelity has four months to comply with the DPA’s directives and will face daily penalties of up to 5,000 euros ($5,200) if it fails to do so.
News: InternationalLegislation DataPrivacy GDPR LitigationEnforcement