On 29 January 2021, the Belgian Data Protection Authority (“GBA“) issued a decision interesting for its contrast between a simple set of facts, on the one hand, and inclusion of bold statements about some fundamental data protection concepts, such as data breach and lawfulness, on the other hand. The parties to the proceedings before the […]