The Netherlands

Netflix International B.V.

4,750,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2024-11-26.

Rank · Sector

#38

of 366 in Media, Telecoms and Broadcasting

Rank · The Netherlands

of 43

Rank · All fines

#77

of 3,039

Case details

Authority: Dutch Supervisory Authority for Data Protection (AP)
Date: 2024-11-26
Controller / Processor: Netflix International B.V.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a) GDPR, Art. 12 (1) GDPR, Art. 13 (1) c), e), f) GDPR, Art. 13 (2) GDPR, Art. 15 (1) a), c), d) GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Dutch DPA has imposed a fine of EUR 4.75 million on Netflix. This fine is based on a complaint filed by the Austrian organization "noyb". During its investigation, the DPA found that between 2018 and 2020, Netflix did not sufficiently inform customers about the processing of their personal data. The privacy policy was partly unclear and, did not provide sufficient information on the purpose and legal basis of the data collection and use, for example. In addition, requests from data subjects regarding retained data were not answered adequately. Netflix has since revised the privacy policy.

Open original source Links to the regulator's original publication or another source.