Gegevensbeschermingsautoriteit / Autorité de protection des données (Data Protection Authority) APD-GBA
Who they are
An independent authority attached to the Chamber of Representatives, successor to the Commission for the Protection of Privacy, with its seat in the administrative district of Brussels-Capital.
What they do
Monitors compliance with the fundamental principles of data protection across Belgium. It works through six bodies, including an Inspection Service and a Litigation Chamber, which can issue warnings and reprimands, order compliance, impose administrative fines and refer cases to the prosecutor. Its decisions can be appealed to the Market Court.
Key laws & regulations issued
- Act Loi du 30 juillet 2018 relative à la protection des personnes physiques à l'égard des traitements de données à caractère personnel (Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data) 2018
- Act Loi du 3 décembre 2017 portant création de l'Autorité de protection des données (Law of 3 December 2017 establishing the Data Protection Authority) 2017
Enforcement by this regulator
| Date | Entity | Action | Penalty | Source |
|---|---|---|---|---|
| 16 Jul 2026 | Y (company in the entertainment sector; anonymised in the published decision) (company (entertainment sector)) | Settlement | €5,000 | source |
| 8 May 2026 | Y (law firm; anonymised in the published decision) (law firm) | Monetary Penalty Remedial Direction | €4,920≈ US$5,786 | source |
| 6 May 2026 | Y-S.A (anonymised in the published decision) (company (employer)) | Remedial Direction Formal Reprimand | — | source |
| 28 Apr 2026 | Fondation Y (pseudonymised in the published decision) (non-profit foundation) | Monetary Penalty | €1,000≈ US$1,168 | source |
| 23 Apr 2026 | Y.NV (accounting firm; anonymised in the published decision) (accounting firm) | Monetary Penalty Remedial Direction | €8,500≈ US$9,940 | source |
| 12 Mar 2026 | Commune de Dilbeek (municipality) | Formal Reprimand | — | source |
| 9 Jan 2026 | Y (sports and leisure club operator; anonymised in the published decision) (sports club operator) | Remedial Direction | — | source |
| 6 Jan 2026 | Y (ICT company specialised in cybersecurity; anonymised in the published decision) (ICT company) | Remedial Direction Formal Reprimand | — | source |
| 27 Nov 2025 | SA Infobel (data broker) | Monetary Penalty Remedial Direction | €40,000≈ US$47,004 | source |
Latest news
No news tagged to this regulator yet.