What does the new Google decision by the Belgian DPA mean for other organisations?
On 14 July 2020, the Belgian DPA fined Google 600.000 EUR, by far the highest fine handed out to date in Belgium. The decision is interesting not just for Google (and Google users) but also for other organisations, due to the lessons it holds regarding international jurisdiction, special categories of personal data and the conditions for the right to erasure or "right to be forgotten".
Among the topics examined, the decision looks at the structure of data processing activities in international organisations, the importance of ensuring data quality and the manner in which organisations handle data subject requests.
Read on for our analysis of the decision and our suggested points of attention for your organisation – many lessons are not specific to Google's activities.