Technology, Media and Telecommunications
Stibbeblog
Digital Law | BE & EU Law
On this blog, our Brussels TMT and Privacy and Data Protection team reports and provides context on Belgian and EU legal and regulatory developments in the field of digital law.

CJEU confirms “right of explanation” in battle between trade secrets and algorithmic transparency
The CJEU's recent ruling emphasizes the GDPR's demand for algorithmic transparency in automated decisions, challenging companies to explain their logic. The decision also shows the difficulty of balancing such transparency with trade secret protection.

Belgian data protection authority fines hospital after data breach for taking insufficient data protection measures
In 2021, a Belgian hospital fell victim to a ransomware attack that disrupted critical operations and compromised the personal data of 300,000 people. As a result, the Belgian data protection authority imposed a fine of €200,000 three years later.

Key takeaways and insights from the EDPB Pseudonymisation Guidelines
On 16 January, 2025, the EDPB released its guidelines on pseudonymisation. These guidelines are not yet finalized, as they remain open for public consultation until 28 February. In this blogpost, we highlight the key takeaways.

Netflix in own privacy cliffhanger: EUR 4.75 million fine from Dutch GDPR Watchdog
Netflix, the global streaming giant, has been fined €4.75 million by the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, or AP) for failing to provide customers with adequate information about how their personal data was being processed.