Articles

Part three - GDPR and public law: To retroact or not?

Part three - GDPR and public law: To retroact or not?

Part three - GDPR and public law: To retroact or not?

07.06.2019 BE law

Since the General Data Protection Regulation (“GDPR”) became applicable almost one year ago, multiple questions have arisen about its interaction with other fields of law. In this three-part blog series of “GDPR and public law”, we discuss three capita selecta of the interaction of GDPR with public law and government. In this blog we discuss the retroactive application of GDPR.

With the GDPR becoming applicable on 25 May 2018 and the new Belgian Data Protection Act of 30 July 2018 entering into force on 5 September 2019, more severe administrative fines and criminal sanctions were introduced in conjunction with several data protection obligations. According to European and national law, there can be no retroactive application of more severe penalties.[1] The European Court of Human Rights has developed some criteria in its jurisprudence to assess whether this principle of non-retroactivity also applies to administrative fines, being (i) the legal qualification of the infringement in national law, (ii) the nature of the infringement and (iii) the severity of the penalty. Following this test, it appears that the administrative fines under the GDPR fall within the scope of this principle of non-retroactivity.

What does this mean in practice?

For infringements that existed only before 25 May 2018, the new sanctions may not be imposed. For infringements that existed only after 25 May 2018, the new sanctions may be imposed. The difficulty lies with infringements that existed both before and after 25 May 2018.

For infringements that existed before and after 25 May 2018, a distinction must be made between criminal sanctions and administrative fines. For criminal sanctions, the infringement will most likely be considered as a whole by using typical mechanisms of criminal law such as “eenheid van opzet / unité d'intention” and “voortdurend misdrijf / infraction continue”. In this respect Article 65 of the Belgian Criminal Code states that: “where one and the same act gives rise to several offences or where several offences which are the successive and continuous execution of the same criminal intention are simultaneously submitted to the same criminal court, only the most serious penalty shall be imposed”. Consequently, the new sanctions will probably be applied to the whole of the infringement.

For administrative fines, the situation is more unclear. The Belgian Constitutional Court has previously ruled that it is not discriminatory that these mechanisms of criminal law do not apply to administrative fines. Article 82, §3 GDPR states that: “if a controller or processor intentionally or negligently, for the same or linked processing operations, infringes several provisions of this Regulation, the total amount of the administrative fine shall not exceed the amount specified for the gravest infringement”. Other than the Article 65 of the Belgian Criminal Code as referred to above, this article is limited to infringements of the GPDR itself and does not explicitly refer to any succession or continuity over time. However, Data Protection Authorities have a lot of leeway and can apply various criteria to ensure reasonableness when imposing administrative fines, amongst which the duration of the infringement, so that de facto they could probably apply the same mechanisms.

 

[1] See Article 7 of the European Convention on Human Rights and Article 2 of the Belgian Criminal Code.

Team

Related news

27.03.2020 BE law
Bijzondere volmachten in tijden van crisis: wat kan en wat niet?

Short Reads - In haar advies van 25 maart 2020 analyseert de afdeling Wetgeving van de Raad van State het wetsvoorstel van 21 maart 2020 tot bijzondere machtiging aan de Koning om maatregelen te nemen in de strijd tegen de verspreiding van het coronavirus COVID-19. Het advies brengt de algemene beginselen inzake bijzondere machten in herinnering en plaatst daarnaast enkele kritische kanttekeningen bij het wetsvoorstel zelf. Voor liefhebbers van het grondwettelijk recht vormt het advies van de afdeling Wetgeving daarom een welgekomen afleiding in tijden van lockdown. 

Read more

22.03.2020 BE law
Les fenêtres (vues et jours) dans l’ère du nouveau Code civil. Que faut-il retenir ?

Articles - La loi portant création d'un Code civil a été promulguée le 13 avril 2019 et publiée le 14 mai 2019 au Moniteur belge. La loi portant le livre 3 « Les biens » du Code civil a, quant à elle, été promulguée le 4 février 2020 et vient d’être publiée ce 17 mars 2020. Ce livre 3 entrera en vigueur le 1er septembre 2021. Que prévoit-il en matière de vues et de jours ? Voici un bref aperçu.

Read more

19.03.2020 NL law
Nederland ‘op slot gooien’ vanwege corona: wie is daartoe bevoegd?

Short Reads - ‘Het coronavirus houdt ons land in de greep’. Dit waren de eerste woorden van premier Rutte toen hij maandag 16 maart 2020 Nederland toesprak over de coronacrisis. In de strijd tegen (de verdere verspreiding van) het coronavirus kiest het kabinet er momenteel voor om het virus maximaal te controleren. Maximaal controleren betekent maatregelen nemen om de piek in het aantal besmettingen af te vlakken en dit aantal te verspreiden over een langere periode.

Read more

18.03.2020 BE law
Corona Checklist for (Supply) Contracts in the Energy & Industry Sector

Short Reads - The outbreak of the corona virus is affecting economies worldwide. Many governments are taking measures to mitigate the spread of the corona virus. Increasingly, this is leading to supply bottlenecks, assembly line stoppages, etc. The table below provides a short checklist of the most common issues that may arise in your contract.

Read more

This website uses cookies. Some of these cookies are essential for the technical functioning of our website and you cannot disable these cookies if you want to read our website. We also use functional cookies to ensure the website functions properly and analytical cookies to personalise content and to analyse our traffic. You can either accept or refuse these functional and analytical cookies.

Privacy – en cookieverklaring