Back Enforcementtracker

ETid-3174: GDPR fine against Isabel SA (Belgium, 2026)

Enforcementtracker • June 7, 2026

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2026-05-12.

The Belgian DPA has imposed a fine of EUR 120,000 on Isabel SA. The controller, who operates the 'TruliUs' authentication application, failed to provide data subjects with correct privacy information due to the fact that the data collected did not match that described in the privacy information. Additionally, the controller collected excessive amounts of data that were not necessary for processing purposes, and failed to adequately respond to a data subject's request to exercise their rights. Lastly, the controller misclassified itself as a processor.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GDPR Fines Imposed on Multiple Companies for Data Protection Violations In recent GDPR enforcement actions, three companies faced fines for various data protection violations. Isabel SA in Belgium was fined EUR 120,000 for providing incorrect privacy information, collecting excessive data, and misclassifying itself. Framos Italia s.r.l. in Italy received a EUR 5,000 fine for denying a former employee access to their work email and failing to respond to data subject requests. Posada del León de Oro in Spain was fined EUR 240 for improperly recording audio with surveillance cameras and not adequately informing data subjects. These actions highlight ongoing scrutiny of data protection compliance across Europe. 7 sources 22

ETid-3174: GDPR fine against Isabel SA (Belgium, 2026)

The full story

Extracted Entities

Companies (1)

Countries (1)