15 DEC 2025 · Court Case

Roll Q/25/0025

Lawyer appeared before the Gent. Fabricated: Case Law | Submission cited 'Cass. 25 november 2021, AR C.20.0193.F'; court verified via Google AI-mode and found the cited cassation decision/rolnummer does not exist and the provided ECLI was incorrect. Outcome: Hearing on possible sanction.

Court: GentParty: Lawyer

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: Gent

01 DEC 2025 · Executive Order

Circular banning use of DeepSeek AI system in all federal government services

On 1 December 2025, the Minister for Government Modernisation’s circular banning the DeepSeek AI system in all federal government services entered into force. Federal employees are prohibited from using DeepSeek applications, which had to be removed from staff devices. The measure implements the preventative prohibition adopted on 11 September 2025, following the June analysis that required government services to list their artificial intelligence tools and identified risks linked to data tra...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

05 OCT 2025 · Other

Safeguards for "consent or pay" models in the updated Recommendation (01/2020) on direct marketing

On 10 May 2025, the Data Protection Authority (APD) closes its consultation on the updated recommendation on direct marketing. The update builds on Recommendation 01/2020 and takes into account developments in case law, regulatory decisions and guidance from the European Data Protection Board (EDPB). An addition to the updated Recommendation is the assessment of "consent or pay" models, where users must either consent to data processing for targeted advertising or pay a fee for an ad-free exp...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 SEP 2025 · Standard / Framework

Data protection authorities adopted joint statement on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI

Primary source (pcpd.org.hk) dated 17 September 2025 in BE. See linked source for full text.

Official materialData Privacy & Protection ·SandboxOfficial source · pcpd.org.hk ↗

26 JUN 2025 · Other

Data Protection Authority investigation into NOYB complaints

On 26 June 2025, the Litigation Chamber of the Belgian Data Protection Authority (APD) dismissed 16 complaints across five cases filed by NOYB, an Austrian privacy advocacy group, on procedural grounds under the General Data Protection Regulation (GDPR). The APD clarified that Belgian law permits associations to lodge complaints only as representatives of identifiable data subjects, not in their own name. The APD noted that NOYB’s complaints involved automated identification of alleged violat...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 MAY 2025 · Law / Act

APD investigation into IAB Transparency and Consent Framework regarding GDPR compliance

On 14 May 2025, the Belgian Market Court ruled in the case between the Belgian Data Protection Authority (DPA) and Interactive Advertising Bureau (IAB) Europe regarding the Transparency and Consent Framework (TCF). The ruling followed the Court of Justice of the European Union's (CJEU) judgment of 7 March 2024 (case C-604/22), which confirmed that the TC String constitutes personal data under the General Data Protection Regulation (GDPR) and designated IAB Europe as a joint data controller. T...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 MAY 2025 · Other

Data protection requirements in the updated Recommendation (01/2020) on direct marketing

On 10 May 2025, the Data Protection Authority (APD) closes its consultation on the updated recommendation on direct marketing. The update is based on Recommendation 01/2020 and takes into account developments in case law, regulatory decisions, and guidance from the European Data Protection Board (EDPB). The revised Recommendation defines terms related to direct marketing, describes the legal basis for processing prospective customer data under the legitimate interest framework, and outlines d...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

31 JAN 2025 · Other

Belgian source source on DeepSeek and data-protection oversight

Official source record dated 31 January 2025 for Belgium concerning Belgian DPA investigates DeepSeek. See the linked brusselstimes.com source for the authoritative text, procedural context, and implementation details.

Secondary evidenceData Privacy & ProtectionIssuing institution: Issuing authority not identified

10 JAN 2025 · Court Case

Family Law Case

Lawyer appeared before the Ghent CA. Fabricated: Case Law Outcome: Reprimand.

Court: Ghent CAParty: Lawyer

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: Ghent CA

10 NOV 2024 · Other

Data Protection Authority investigation into RTL Belgium's cookie banner

On 11 October 2024, The Data Protection Authority issued a decision in case no. 131/2024 regarding a complaint against RTL Belgium’s cookie banner. This complaint was lodged by a representative from Noyb (European Center for Digital Rights), alleging that RTL's cookie banner contravened both the General Data Protection Regulation (GDPR) and Belgian law. The complaint specifically highlighted that RTL's banner did not offer equal choices for users to "Accept All" and "Refuse All" cookies at th...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

18 OCT 2024 · Law / Act

Law establishing a framework for the cybersecurity of networks and information systems of general interest for public security implementing the NIS-2 (2022/2555) Directive

On 18 October 2024, the Act establishing a framework for the cybersecurity of networks and information systems of general interest for public security, enters into force. The Act transposes the Directive (EU) 2022/2555 into national legislation. It mandates entities to register with the Centre for Cybersecurity Belgium and implement technical, operational, and organisational measures to mitigate cybersecurity risks. Finally, the Act outlines penalties for non-compliance.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 SEP 2024 · Report

Belgium Data Protection Agency publishes report on GDPR and AI Act

Primary source (autoriteprotectiondonnees.be) dated 22 September 2024 in BE. See linked source for full text.

Secondary evidenceData Privacy & Protection ·Generative AIIssuing institution: Issuing authority not identified

19 SEP 2024 · Law / Act

Brochure on Artificial Intelligence Systems and the GDPR

On 19 September 2024, the Belgian Data Protection Authority (ADP) published a Brochure on Artificial Intelligence Systems and the GDPR, which focuses on the interplay between the General Data Protection Regulation (GDPR) and the AI Act following the latter's entry into force on 1 August 2024. In particular, the Brochure highlights the importance of aligning AI systems with data protection principles while addressing challenges related to privacy, transparency, and accountability. Furthermore,...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

06 SEP 2024 · Other

Data Protection Authority investigation into Roularta Media Group and Google for alleged illegal cross-border data transfer

On 6 September 2024, the Belgian Data Protection Authority (DPA)'s Litigation Chamber dismissed a complaint lodged under Article 80(1) GDPR against Roularta Media Group N.V., a magazine owner, and Google LLC. The complaint, brought forward by Noyb - European Center for Digital Rights, a nonprofit, alleged that personal data was illegally transferred to the US via Google Analytics embedded in the flair.be website owned by Roularta. The case was dismissed because the complaint was found to have...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

03 JUN 2024 · Court Case

Lawsuit alleging unlawful shadow ban on Facebook (Meta v Tom Vandendriessche)

On 3 June 2024, the Court of Appeal in Ghent issued its ruling regarding a lawsuit alleging an unlawful shadow ban on Facebook (Meta v Tom Vandendriessche). Meta must pay EUR 27'279 to a Belgian politician for the advertising costs incurred due to a shadow ban imposed on his Facebook page from February to December 2021. Additionally, Meta must pay EUR 500 for reputational damage. The Court stated that Meta's actions reduced the page's organic reach and temporarily restricted the advertising a...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

15 MAR 2024 · Other

Data Protection Authority investigation into processing of personal information for personalised advertising

On 15 March 2024, the Disputes Chamber of the Data Protection Authority (DPA) issued a ruling in an investigation following a complaint on the processing of personal data, including the content of payment transactions, for building models to offer “personalised discounts”. The ruling states that according to Article 5 of the General Data Protection Regulation (GDPR), processing of personalised data for purposes other than those for which the personal data was initially collected is permitted...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

05 FEB 2024 · Standard / Framework

CSA inquiry into availability of harmful content on the Online Plattform X

On 5 February 2024, the Superior Audiovisual Council (CSA) released findings from its inquiry on harmful online content conducted in the context of the Digital Services Act (DSA). The focus was specifically on pornographic content from French-speaking accounts on platform X, monitored from 6 September to 11 December 2023. Out of nearly 5'000 flagged items, 1'041 were reviewed by CSA, with 89% being identified as clearly pornographic. The CSA noted that despite this, only about 10% of these ...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

16 JAN 2024 · Law / Act

GBA investigation into Black Tiger Belgium for alleged GDPR violations

On 16 January 2024, the Belgian Data Protection Authority (GBA) imposed a total of EUR 174'640 in administrative fines and corrective measures on Black Tiger Belgium, a big data and data management company, for multiple breaches of the General Data Protection Regulation (GDPR). The GBA found that the company had unfairly processed personal data without proactively and transparently informing the data subjects. The company was also found to have violated the rights of data subjects and failed ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 DEC 2023 · Other

Belgian DPA investigation into Google concerning right of erasure

On 22 December 2023, the Belgian Data Protection Authority (DPA) issued a decision and closed its investigation into Google concerning the right of erasure. The investigation concerned a complaint by an individual seeking to have links removed from Google Search, which contained accusations against the company of which the complainant was a director. The DPA stated that the right to erasure in the General Data Protection Regulation (GDPR) is based on balancing the individual’s right to data p...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

20 OCT 2023 · Other

Data Protection Authority Cookie Checklist

On 20 October 2023, the Belgian Data Protection Authority (APD) published a cookie checklist directed at organisations to ensure their cookies and other tracking mechanisms policies are in compliance with the law. The APD clarifies that all cookies except strictly necessary ones need consent, and consent has to be given in advance, free, specific, informed, unambiguous, and active.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

04 OCT 2023 · Law / Act

DPA investigation into Google's dismissal of an erasure request compliance with GDPR

On 4 October 2023, the Belgian Data Protection Authority (DPA) closed an investigation into Google’s dismissal of an erasure request compliance with the General Data Protection Regulation (GDPR) following an individual complaint alleging that his rights under Article 17 on the right to erasure were violated. The DPA closed the case, stating that the erasure request concerned the professional activity of an individual with a role in public life and was published by journalistic sources. Furthe...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

24 MAY 2023 · Law / Act

DPA investigation into the transfer of tax data from Belgium to US under Foreign Account Tax Compliance Act compliance with GDPR

On 24 May 2023, the Belgian Data Protection Authority (DPA) Litigation Chamber issued its ruling in the investigation into the transfer of tax data from Belgium to the United States under the Foreign Account Tax Compliance Act (FATCA) compliance with the General Data Protection Regulation (GDPR). The DPA ruled that the FATCA agreement doesn't comply with the GDPR, noting that the transfer of tax data violates the principles principle of purpose, data minimisation and proportionality of GDPR. ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 MAY 2023 · Executive Order

FSMA Regulation subjecting to restrictive conditions the marketing of virtual currencies to consumers

On 17 May 2023, the Regulation of the Belgium Financial Services and Markets Authority (FSMA), subjecting to restrictive conditions the marketing of virtual currencies to consumers, was implemented. The Regulation outlines transparency obligations for entities marketing or advertising virtual currencies, such as Bitcoin or Ether, to customers in Belgium. In particular, the Regulation requires advertisements to include a disclaimer outlining the risks of cryptocurrency investments and provide ...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

08 FEB 2023 · Law / Act

Bill on the retention of personal data including traffic and location data

On 8 February 2023, the Bill regarding the retention of personal data (Bill 8148) was introduced in the Chamber of Deputies. The Bill's objective is to control the storage and usage of traffic and location data by establishing rules and conditions for obtaining and utilising electronic communications data in criminal investigations. The Bill intends to balance the need for national security, including the prevention of criminal activities and risks to public safety, with the protection of cit...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

12 JAN 2023 · Court Case

Lawsuit concerning third party right to appeal decisions from the Belgian Data Protection Authority

On 12 January 2023, the Belgian Constitutional Court issued a ruling stating that any interested third party is entitled to bring an appeal against a decision from the Belgian Data Protection Authority before the Market Court. The Constitutional Court issued its ruling based on Article 78 of the General Data Protection Regulation (EU GDPR), which grants natural and legal persons the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

25 MAY 2022 · Other

Data protection investigation regarding cookie use of Roularta Media Group

On 25 May 2022, the Belgian Data Protection Authority (DPA) concluded its investigation of Roularta Media Group for GDPR-compliance by imposing a fine of EUR 50'000. The DPA found that the news websites knack.be and levif.be, which are run by Roularta, violated the GDPR in their cookie use. Specifically, the websites did not comply with the requirement of obtaining prior consent for cookie use from users. Cookies that were not strictly necessary were applied before consent was obtained, viola...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

27 APR 2022 · Court Case

Lawsuit concerning Data Sharing Requirements for Financial Transactions (Airbnb v Brussels-Capital Region)

On 27 April 2022, the Court of Justice of the European Union (CJEU) ruled on Case C-674/20, where the involved parties are Airbnb Ireland and the City of Brussels. Airbnb Ireland alleged that it is illegal for Belgian tax authorities to request tourist accommodation transactions. The CJEU ruled that the request is legal because the data-sharing requirements for the field of taxation differ from requirements that fall under the scope of the e-Commerce Directive.

Court recordNational StrategyOfficial source · curia.europa.eu ↗

01 SEP 2021 · Working Paper

Consultation regarding the recommendations on the processing of biometric data

The Belgian Supervisory Authority (SA) closes its consultation on recommendations regarding the processing of biometric data on September 1, 2021. The consultation period opened on July 15, 2021. The recommendation's stated goal is to instruct data controllers on how to interpret data protection law and in particular the General Data Protection Regulation (GDPR). Specifically, the scope of Art. 9 GDPR is addressed. Finally, the SA recommends a general prohibition of secondary use of biometric...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

19 AUG 2021 · Other

Encryption ruled as sufficient supplementary measure for US-EU data transfer by Belgian Council of State

On 19 August 2021, the Council of State ruled that encryption is a valid supplementary measure to transfer data to the US when adequate technical and organizational measures are implemented. On 10 August 2021, a Dutch company had challenged the decision of the Flemish Region to grant a tender to an EU company (Viavan) that relies on the cloud services of Amazon Web Service (AWS). The company contested that such a decision violated the Schrems II decision because Viavan relies on AWS services ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

20 MAY 2021 · Law / Act

Belgian data protection agency approves transnational GDPR code of conduct

The Code aims to create comparability between different data processing practices in the cloud industry and to improve upon the state of the art for data protection by cloud service providers. It includes data subject rights as well as minimum security and transparency requirements.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

AI4Belgium (Belgian national AI coalition / roadmap)

AI law in Belgium: AI4Belgium is a national coalition and strategic roadmap initiated to coordinate Belgium’s public-private-academic AI ecosystem, promote responsible adoption, and create an observatory for monitoring AI uptake and ethics. Led by the Federal Public Service for Policy and Support together with regional hubs, industry and research partners, the initiative focuses on skills, trustworthiness, data infrastructures, and alignment with EU AI priorities....

Official materialNational StrategyOfficial source · eur-lex.europa.eu ↗

National Strategy

FARI AI for the Common Good Institute

AI law in Belgium: A Brussels-based institute leveraging AI and robotics for urban common good and public interest through academic-government collaboration.

Official materialNational StrategyOfficial source · digitalskillsjobs.europa.eu ↗

National Strategy

DigitalWallonia4.AI (Walloon AI programme / Digital Wallonia AI)

AI law in Belgium: DigitalWallonia4.ai is the Walloon regional AI programme launched under the Digital Wallonia strategy to accelerate AI adoption across society, business and research in Wallonia. It is a strategy-led programme managed by the Walloon Agency for Digital Affairs with multiple partners (Agoria, Infopôle, Réseau IA) and includes awareness, training, business support (Start IA, Tremplin IA), research partnerships and an open-performance dashboard....

Official materialNational StrategyOfficial source · knowledge4policy.ec.europa.eu ↗

National Strategy

Wallonia DigitalWallonia4.ai Program 2020-2024

AI law in Belgium: The Wallonia DigitalWallonia4.ai Program 2020-2024 is a regional initiative in Belgium accelerating AI adoption and fostering its local AI ecosystem.

Official materialNational StrategyOfficial source · digital-strategy.ec.europa.eu ↗