[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG4eADSG4l_2Xv4T-bejODW0MNFMreWlIdnYqhckqK-4":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":80},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"57388f57-3450-497e-84fc-dfdf1bf4a788","Rb. Noord-Nederland - C\u002F 18\u002F189406\u002FHA ZA 19-6","rb-noord-nederland-c-18-189406-ha-za-19-6-a03715","Wiki maintenance (fixed links) ← Older revision Revision as of 07:13, 6 July 2026 Line 12: Line 12: |Original_Source_Name_1=de Rechtspraak |Original_Source_Name_1=de Rechtspraak |Original_Source_Link_1=https:\u002F\u002Fuitspraken.rechtspraak.nl\u002Finziendocument?id=ECLI:NL:RBNNE:2020:247&showbutton=true&keyword=AVG |Original_Source_Link_1=https:\u002F\u002Fuitspraken.rechtspraak.nl\u002Finziendocument?id=ECLI:NL:RBNNE:2020:247&showbutton=true&keyword=AVG |Original_Source_Language_1=NL |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Name_2= Line 64: Line 64: }} }} The District Court of the Northern Netherlands ruled that the disclosure of personal data through a Facebook message constituted a loss of control of personal data and a breach of [[Article 5 GDPR#1f| Article 5(1)(f) GDPR]], [[Article 6 GDPR|Article 6 GDPR]] and [[Article 32 GDPR#2|Article 32(2) GDPR]]. The District Court of the Northern Netherlands ruled that the disclosure of personal data through a Facebook message constituted a loss of control of personal data and a breach of [[Article 5 GDPR#1f| Article 5(1)(f) GDPR]], [[Article 6 GDPR]] and [[Article 32 GDPR#2|Article 32(2) GDPR]]. ==English Summary== ==English Summary==","The District Court of the Northern Netherlands ruled that disclosing personal data via a Facebook message constitutes a loss of control over that data and violates GDPR articles related to data integrity, lawfulness of processing, and security. The case involved a company that shared a personal data extract through a Facebook message for legal proceedings.","Dutch court rules Facebook message disclosure of personal data breaches GDPR.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=Rb._Noord-Nederland_-_C\u002F_18\u002F189406\u002FHA_ZA_19-6&diff=52064&oldid=51992","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-07-06T07:13:12+00:00","2026-07-06T08:00:21.177313+00:00",7,[17,20],{"name":18,"type":19},"Facebook","product",{"name":21,"type":22},"NDC MEDIA GROUP E.G","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[21,18],{"controls":49,"vendors":79},[50],{"slug":51,"name":52,"problem":53,"products":54},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",[],{"slug":81,"title":82,"body":83,"framework_refs":84,"framework_notes":95},"gdpr-violation-sharing-personal-data-via-facebook-message-ruled-unlawful","GDPR Violation: Sharing Personal Data via Facebook Message Ruled Unlawful","A Dutch court ruled that sharing a personal data extract through a Facebook message constituted a loss of control over that data, violating core GDPR principles including lawfulness of processing, data integrity, and security. The fundamental failure was the use of an insecure, consumer-grade social media platform to transmit sensitive personal information, regardless of the intended legal purpose. This matters because once personal data is shared via a platform like Facebook, the data subject loses control, and the organisation loses the ability to ensure confidentiality, integrity, or access restrictions. The case illustrates that good intentions — such as using data for legal proceedings — do not override the obligation to use appropriate, secure transmission channels. Organisations must treat the method of data sharing as equally important as the decision to share.",[85,86,87,88,89,90,91,92,93,94],"GDPR Article 5(1)(f) — Integrity and confidentiality principle","GDPR Article 6 — Lawfulness of processing","GDPR Article 25 — Data protection by design and by default","GDPR Article 32 — Security of processing","NIST SP 800-53 SC-8 — Transmission Confidentiality and Integrity","NIST SP 800-53 AC-3 — Access Enforcement","CIS Control 3 — Data Protection","CIS Control 14 — Security Awareness and Skills Training","ISO\u002FIEC 27001:2022 A.5.33 — Protection of records","ISO\u002FIEC 27001:2022 A.8.24 — Use of cryptography",{}]