Privacy and Data Protection
Stibbeblog
Digital Law
BE and EU Law - On this blog, our Brussels TMT and Privacy and Data Protection team reports and provides context on Belgian and EU legal and regulatory developments in the field of digital law.

De AP op zoek naar de juiste regie in een veranderend privacy-landschap
Op 3 maart heeft de AP het evaluatierapport over haar functioneren naar de Tweede Kamer verstuurd. Het is duidelijk dat de AP voor uitdagingen staat in een veranderend privacy-landschap.

CJEU confirms “right of explanation” in battle between trade secrets and algorithmic transparency
The CJEU's recent ruling emphasizes the GDPR's demand for algorithmic transparency in automated decisions, challenging companies to explain their logic. The decision also shows the difficulty of balancing such transparency with trade secret protection.

Belgian data protection authority fines hospital after data breach for taking insufficient data protection measures
In 2021, a Belgian hospital fell victim to a ransomware attack that disrupted critical operations and compromised the personal data of 300,000 people. As a result, the Belgian data protection authority imposed a fine of €200,000 three years later.

Key takeaways and insights from the EDPB Pseudonymisation Guidelines
On 16 January, 2025, the EDPB released its guidelines on pseudonymisation. These guidelines are not yet finalized, as they remain open for public consultation until 28 February. In this blogpost, we highlight the key takeaways.