The Belgian Privacy Commission (the Commission) released its 2016 Annual Report last month that details the Commissions activities over the past year and highlights major developments on the Belgian privacy front. Unsurprisingly, much of the Commission’s activities centered around initiatives to help businesses prepare for the implementation of the General Data Protection Regulation (GDRP) that comes into effect on May 25, 2018. These include a 13-step manual, FAQ, a thematic dossier, and guidelines and recommendations on interpretation of the GDRP. The Commission also participated in various conferences and workshops. Beyond preparation for GDRP implementation, the Commission issued an opinion on cloud-based services that detailed obligations and provided guidelines for companies employing such services.
The Annual Report also highlights a Court of Appeal case that set aside a judgment against Facebook resulting from summary proceedings for Facebook’s collection of data from non-users, finding that the Commission had no jurisdiction over Facebook Ireland or Facebook, Inc. The Annual Report concluded with some raw numbers representing the Commission’s activities from the past year, including an excess of 10,000 new data processing declarations. The full Annual Report is available in French and Dutch.
TIP: As GDPR implementation nears, local DPAs are continuing to provide guidance to assist corporations.