{"id":29613,"date":"2024-09-16T13:14:17","date_gmt":"2024-09-16T13:14:17","guid":{"rendered":"https:\/\/thelegalcompany.nl\/?p=29613"},"modified":"2026-09-02T08:00:20","modified_gmt":"2026-09-02T08:00:20","slug":"gdpr-pitfalls-in-practice","status":"publish","type":"post","link":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/","title":{"rendered":"GDPR pitfalls in practice"},"content":{"rendered":"<p>Privacy is a topic that makes the news every day, often through reports of sensitive data breaches, hacks, or sky-high fines for businesses. For business owners, it is crucial to know how to avoid these risks and pitfalls. In this blog we discuss various current developments regarding the General Data Protection Regulation (&#8220;GDPR&#8221;).<\/p>\n<h5><strong>The DPIA<\/strong><\/h5>\n<p>The Dutch Data Protection Authority (&#8220;AP&#8221;) rapped the <a href=\"https:\/\/www.autoriteitpersoonsgegevens.nl\/uploads\/2024-04\/Brief%20toezicht%20Eindhoven.pdf\">Municipality of Eindhoven<\/a> on the knuckles in April 2024. The AP has at any rate intensified its supervision of Eindhoven due to concerns about privacy obligations, such as failing to report data breaches on time and the absence of mandatory Data Privacy Impact Assessments (&#8220;DPIAs&#8221;). The intensified supervision was put in place because the municipality&#8217;s earlier improvement plans turned out to be inadequate.<\/p>\n<h5><strong>Cookies<\/strong><\/h5>\n<p>On 16 July 2024, A.S. Watson Health &#038; Beauty Continental Europe B.V. (the parent company of Kruidvat) received <a href=\"https:\/\/www.autoriteitpersoonsgegevens.nl\/documenten\/besluit-boete-as-watson-kruidvat\">a fine of \u20ac600,000 from the AP<\/a>. The reason was the use of tracking cookies without valid consent from website visitors. The cookie banner on kruidvat.nl had pre-ticked boxes, which, according to the AP, was in breach of the GDPR, which requires an active action. Notably, the fine was only imposed after four years, due to a lack of capacity at the AP. AS Watson has objected to this fine. To be continued!<\/p>\n<h5><strong>Rights of data subjects<\/strong><\/h5>\n<p>It is important that your organization handles data subjects&#8217; rights correctly. As recently emerged in a case against <a href=\"https:\/\/uitspraken.rechtspraak.nl\/details?id=ECLI:NL:RBAMS:2024:4019\">Twitter\/X<\/a>, failing to comply with a subject access request can prove very costly for a company. In this case, it was not clear to the user how his personal data had been processed. The court ruled that he was entitled to access the automated decision-making, especially since there were significant consequences for the user. Twitter was therefore ordered to fully comply with the access request after all, on pain of a penalty of \u20ac4,000 per day.<\/p>\n<h5><strong>Damages, fines, and sanctions<\/strong><\/h5>\n<p><a href=\"https:\/\/www.autoriteitpersoonsgegevens.nl\/actueel\/ap-legt-uber-boete-op-van-290-miljoen-euro-om-doorgifte-data-chauffeurs-naar-vs\">The AP has once again imposed a fine on Uber<\/a>. This time a fine of 290 million euros for unlawfully transferring the personal data of European taxi drivers to the United States. Uber did not adequately protect this data, which is in breach of the GDPR. This concerned sensitive information such as location and payment data, taxi licenses, and sometimes even medical and criminal record data. Uber has since ended this violation. The fine follows complaints from French drivers and was coordinated with other European regulators. Uber has announced it will object to the fine. This is already the third fine for Uber in Europe.<\/p>\n<p><strong><em>Would you like to know how your organization can protect itself against these pitfalls? On 10 October, The Legal Company is organizing a <\/em><\/strong><a href=\"https:\/\/thelegalcompany.nl\/masterclasses\/actualiteiten-avg-en-privacyrecht\/\"><strong><em>breakfast session: GDPR &#038; Privacy Law Update<\/em><\/strong><\/a><strong><em> where you will be briefed on the latest GDPR and privacy law developments, so you can take action to keep your organization compliant! Sign up via <\/em><\/strong><a href=\"mailto:info@thelegalcompany.nl\"><strong><em>info@thelegalcompany.nl<\/em><\/strong><\/a><strong><em> or call 020 345 0152.<\/em><\/strong><\/p>\n<p><em>Nothing changes as constantly as laws and regulations. Please note that our blogs may no longer align with current laws and regulations and may therefore be outdated. If you have questions or an issue relating to this blog, or would like legal assistance, please contact us.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy is a topic that makes the news every day, often through reports of sensitive data breaches, hacks, or sky-high fines for businesses. For business owners, it is crucial to know how to avoid these risks and pitfalls. In this blog we discuss various current developments regarding the General Data Protection Regulation (&#8220;GDPR&#8221;). The DPIA [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":24064,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"page_builder":"","footnotes":"","_et_pb_custom_css":""},"categories":[214],"tags":[],"class_list":["post-29613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy-law"],"acf":[],"_et_pb_custom_css":"","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GDPR pitfalls in practice - The Legal Company<\/title>\n<meta name=\"description\" content=\"In deze blog bespreken we verschillende actualiteiten omtrent de Algemene Verordening Gegevensbescherming (\u2018\u2019AVG\u2019\u2019)\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR pitfalls in practice - The Legal Company\" \/>\n<meta property=\"og:description\" content=\"In deze blog bespreken we verschillende actualiteiten omtrent de Algemene Verordening Gegevensbescherming (\u2018\u2019AVG\u2019\u2019)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/\" \/>\n<meta property=\"og:site_name\" content=\"The Legal Company\" \/>\n<meta property=\"article:published_time\" content=\"2024-09-16T13:14:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-02T08:00:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/09\/Banner-voor-eigen-website-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2500\" \/>\n\t<meta property=\"og:image:height\" content=\"1728\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"devteam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"devteam\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/\"},\"author\":{\"name\":\"devteam\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\"},\"headline\":\"GDPR pitfalls in practice\",\"datePublished\":\"2024-09-16T13:14:17+00:00\",\"dateModified\":\"2026-09-02T08:00:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/\"},\"wordCount\":532,\"image\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/Banner-voor-eigen-website-1.jpg\",\"articleSection\":[\"Privacy Law\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/\",\"name\":\"GDPR pitfalls in practice - The Legal Company\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/Banner-voor-eigen-website-1.jpg\",\"datePublished\":\"2024-09-16T13:14:17+00:00\",\"dateModified\":\"2026-09-02T08:00:20+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\"},\"description\":\"In deze blog bespreken we verschillende actualiteiten omtrent de Algemene Verordening Gegevensbescherming (\u2018\u2019AVG\u2019\u2019)\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/Banner-voor-eigen-website-1.jpg\",\"contentUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/Banner-voor-eigen-website-1.jpg\",\"width\":2500,\"height\":1728},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/gdpr-pitfalls-in-practice\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR pitfalls in practice\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/\",\"name\":\"The Legal Company\",\"description\":\"Juristen voor het bedrijfsleven\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\",\"name\":\"devteam\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"caption\":\"devteam\"},\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/author\\\/devteam\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR pitfalls in practice - The Legal Company","description":"In deze blog bespreken we verschillende actualiteiten omtrent de Algemene Verordening Gegevensbescherming (\u2018\u2019AVG\u2019\u2019)","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/","og_locale":"en_US","og_type":"article","og_title":"GDPR pitfalls in practice - The Legal Company","og_description":"In deze blog bespreken we verschillende actualiteiten omtrent de Algemene Verordening Gegevensbescherming (\u2018\u2019AVG\u2019\u2019)","og_url":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/","og_site_name":"The Legal Company","article_published_time":"2024-09-16T13:14:17+00:00","article_modified_time":"2026-09-02T08:00:20+00:00","og_image":[{"width":2500,"height":1728,"url":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/09\/Banner-voor-eigen-website-1.jpg","type":"image\/jpeg"}],"author":"devteam","twitter_card":"summary_large_image","twitter_misc":{"Written by":"devteam","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#article","isPartOf":{"@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/"},"author":{"name":"devteam","@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e"},"headline":"GDPR pitfalls in practice","datePublished":"2024-09-16T13:14:17+00:00","dateModified":"2026-09-02T08:00:20+00:00","mainEntityOfPage":{"@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/"},"wordCount":532,"image":{"@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#primaryimage"},"thumbnailUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/09\/Banner-voor-eigen-website-1.jpg","articleSection":["Privacy Law"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/","url":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/","name":"GDPR pitfalls in practice - The Legal Company","isPartOf":{"@id":"https:\/\/thelegalcompany.nl\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#primaryimage"},"image":{"@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#primaryimage"},"thumbnailUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/09\/Banner-voor-eigen-website-1.jpg","datePublished":"2024-09-16T13:14:17+00:00","dateModified":"2026-09-02T08:00:20+00:00","author":{"@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e"},"description":"In deze blog bespreken we verschillende actualiteiten omtrent de Algemene Verordening Gegevensbescherming (\u2018\u2019AVG\u2019\u2019)","breadcrumb":{"@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#primaryimage","url":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/09\/Banner-voor-eigen-website-1.jpg","contentUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/09\/Banner-voor-eigen-website-1.jpg","width":2500,"height":1728},{"@type":"BreadcrumbList","@id":"https:\/\/thelegalcompany.nl\/en\/gdpr-pitfalls-in-practice\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thelegalcompany.nl\/en\/"},{"@type":"ListItem","position":2,"name":"GDPR pitfalls in practice"}]},{"@type":"WebSite","@id":"https:\/\/thelegalcompany.nl\/en\/#website","url":"https:\/\/thelegalcompany.nl\/en\/","name":"The Legal Company","description":"Juristen voor het bedrijfsleven","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thelegalcompany.nl\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e","name":"devteam","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","caption":"devteam"},"url":"https:\/\/thelegalcompany.nl\/en\/author\/devteam\/"}]}},"_links":{"self":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/comments?post=29613"}],"version-history":[{"count":1,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29613\/revisions"}],"predecessor-version":[{"id":29614,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29613\/revisions\/29614"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/media\/24064"}],"wp:attachment":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/media?parent=29613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/categories?post=29613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/tags?post=29613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}