'Pink Boxes' for Parents-to-be Fined by Belgian DPA
- 10/02/2021
- News
The Belgian Data Protection Authority imposed a fine of EUR 50,000 on the marketing company Family Service, which distributes “pink boxes” – well known by mothers and fathers-to-be in Belgium – for various breaches of the GDPR. Not only did the company rent out and/or sell the data of more than one million customers, including the data of children, for commercial purposes without informing its customers in a clear and comprehensible manner. The company also transferred these personal data to its business partner without obtaining a freely given, specific and informed consent.
The Data Protection Authority considers the decision to be a warning to data brokers that rent or sell personal data under similar business models without proper compliance with the GDPR.
