{"id":101219,"date":"2025-11-17T13:13:47","date_gmt":"2025-11-17T12:13:47","guid":{"rendered":"https:\/\/www.ictrechtswijzer.be\/?p=101219"},"modified":"2025-11-17T13:18:36","modified_gmt":"2025-11-17T12:18:36","slug":"is-the-gba-competent-for-alle-data-processing-a-ruling-on-security-clearances-and-the-right-to-a-copy","status":"publish","type":"post","link":"https:\/\/www.ictrechtswijzer.be\/en\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/","title":{"rendered":"Is the DPA competent for all data processing? A ruling on security clearances and the right to a copy"},"content":{"rendered":"<p class=\"wp-block-paragraph\">When an employee files a complaint about the processing of their personal data, the <a href=\"https:\/\/www.gegevensbeschermingsautoriteit.be\/\" target=\"_blank\" rel=\"noreferrer noopener\">Data Protection Authority (DPA)<\/a> is usually the competent authority. A <a href=\"https:\/\/www.gegevensbeschermingsautoriteit.be\/publications\/arrest-van-3-september-2025-van-het-marktenhof-ar-219-beschikbaar-in-het-frans.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">ruling<\/a> of 3 September 2025 by the Market Court in Brussels (the appellate body for DPA decisions), however, nuances this.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Court overturned an entire DPA decision against a government agency. The reasons are important for any organization: first, the DPA lacked jurisdiction to adjudicate data processing in the context of security clearances. Second, the Court clarified that the right to a \u201ccopy\u201d (GDPR) does not automatically imply a right to a copy of the entire document.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-de-feiten-een-geweigerde-veiligheidsmachtiging-en-de-gevolgen\">The facts: a denied security clearance and the consequences<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The case revolved around a statutory official at a Belgian regulator, a public utility institution<sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup>. For his position, this person needed a security clearance<sup><\/sup>.<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>The refusal:<\/strong> The <a href=\"https:\/\/www.nvoans.be\/nl\" target=\"_blank\" rel=\"noreferrer noopener\">National Security Government<\/a> refused to renew this clearance. The reason was particularly sensitive: the official was \u201cknown to the Prosecutor's Office (as a suspect) in a case....\u201d.<\/li>\n\n\n\n<li><strong>Internal communications:<\/strong> The NSG communicated this reasoned decision (including the sensitive information about the criminal investigation) to the employer's security officer.<\/li>\n\n\n\n<li><strong>Further dissemination:<\/strong> The security officer then forwarded the full, reasoned decision to the institution's management. The management in turn shared the decision with the officer's hierarchical superior.<\/li>\n\n\n\n<li><strong>The implications:<\/strong> Based on this information, the employer initiated disciplinary proceedings against the official and unsuccessfully tried to access the criminal file at the Prosecutor's Office.<\/li>\n\n\n\n<li><strong>The complaint:<\/strong> The official filed a complaint with the DPA for multiple violations of the <a href=\"https:\/\/www.ictrechtswijzer.be\/en\/data-protection\/\" target=\"_blank\" rel=\"noreferrer noopener\">General Data Protection Regulation (GDPR)<\/a>, particularly the unlawful processing of his highly sensitive criminal records. He also requested access to correspondence between his employer and the Prosecutor's Office, which he was denied.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-de-beslissing-het-marktenhof-vernietigt-het-oordeel-van-de-gba\">The decision: The Market Court overturns the judgment of the DPA<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA had ruled against the employer on two key points:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The DPA ruled that the internal dissemination of the reasoned decision (to management and the superior) was illegal, in the absence of a valid legal basis under the GDPR (arts. 5, 6 and 10).<\/li>\n\n\n\n<li>The DPA argued that the employer had improperly denied access to correspondence with the Prosecutor's Office (a violation of Articles 12 and 15 GDPR).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA  imposed a reprimand, ordered the deletion of the records, and demanded that access still be granted. The employer successfully appealed to the Market Court, which overturned the entire DPA decision.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Court's reasoning is based on two separate pillars:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-1-de-gba-was-onbevoegd-voor-de-dataverwerking\">1. The DPA was unauthorized for data processing.<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Market Court ruled that the DPA was not competent to rule on the substance of the complaint (the internal dissemination of the refusal decision).<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The data processing (the communication by the security officer) took place within the framework of he <a href=\"https:\/\/www.ejustice.just.fgov.be\/cgi_loi\/change_lg.pl?language=nl&amp;la=N&amp;cn=1998121161&amp;table_name=wet\" target=\"_blank\" rel=\"noreferrer noopener\">Law of 11 December 1998 on security clearances.<\/a>.<\/li>\n\n\n\n<li>The <a href=\"https:\/\/www.ejustice.just.fgov.be\/cgi_loi\/change_lg.pl?language=nl&amp;la=N&amp;cn=2018073046&amp;table_name=wet\" target=\"_blank\" rel=\"noreferrer noopener\">personal data processing act of 30 July 2018<\/a> explicitly provides that oversight of data processing under that particular law does not fall under the remit of the DPA.<\/li>\n\n\n\n<li>The exclusively competent supervisor for this matter is the <strong><a href=\"https:\/\/www.comiteri.be\/index.php\/en\/\" target=\"_blank\" rel=\"noreferrer noopener\">Standing Committee I<\/a><\/strong> (the intelligence and security services control body).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA's argument that this was mere \u2018personnel management\u2019 was dismissed by the court<sup><\/sup>. Because the decision on the illegality of the first internal division (treatment 3) was overturned, and the DPAhad linked its judgment on the subsequent divisions (treatments 4 and 5) to it, the entire data processing section was cancelled<sup><\/sup>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-2-het-recht-op-een-kopie-avg-is-geen-absoluut-recht-op-een-document\">2. The right to a \u201ccopy\u201d (GDPR) is not an absolute right to a \u201cdocument\u201d<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The second part of the ruling dealt with the employer's refusal to provide a copy of the letters to the Prosecutor's Office. Again, the Court overturned the DPA's decision, on the grounds of inadequate reasoning and an erroneous interpretation of the law<sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup>.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Court reiterated European case law (<a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf?text=&amp;docid=273286&amp;pageIndex=0&amp;doclang=NL&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=7526579\" target=\"_blank\" rel=\"noreferrer noopener\">ECJ C-487\/21<\/a>). Article 15.3 of the GDPR gives data subjects the right to a copy of their personal data being processed.<\/li>\n\n\n\n<li>This does not automatically imply a right to receive a copy of the documents themselves (such as the full emails or letters).<\/li>\n\n\n\n<li>A right to a copy of the document arises only if it is \u201cindispensable\u201d to enable the data subject to understand his data and verify the lawfulness of the processing.<\/li>\n\n\n\n<li>In its decision, the DPA had completely failed to justify why a mere summary of the data would not suffice and why it was \u201cindispensable\u201d for the official to obtain the full letters.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-juridische-analyse-en-duiding\">Legal analysis and interpretation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This ruling has two important implications that directly affect DPA practice and data protection law in Belgium.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>First, the DPA is not a \u2018super-regulator'.<\/strong> The powers of the DPA are clearly delineated. This ruling is a powerful reminder that for specific matters, such as data processing by intelligence and security agencies (or under their legislation), specific regulators (such as the Committee I) have exclusive jurisdiction. The DPA should have declared the complaint inadmissible on this point. Organizations operating in these \u2018gray areas\u2019 (defense, national security, justice) should be aware of this division.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Second, the scope of Article 15 GDPR is not unlimited.<\/strong> The Market Court here affirms a principle that often leads to discussion in practice. The right of access is sometimes (mis)used as a \u2018fishing expedition\u2019 to collect documents for other proceedings (e.g., a dismissal case or, as here, disciplinary proceedings). This ruling clearly states that the right to a \u2018copy\u2019 is primarily a copy of the data. The burden of proof is on the applicant (or the DPA) to show why a copy of the document is \u2018indispensable\u2019 to the understanding of that data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-wat-dit-concreet-betekent\">What this specifically means<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>For organizations with security officers:<\/strong> The processing of personal data (such as a reasoned refusal) by a security officer under the 1998 Act falls under the control of Committee I, not the DPA.<\/li>\n\n\n\n<li><strong>For employees:<\/strong> If your complaint concerns the actions of a security officer or the framework of a security clearance, you should contact the Standing Committee I.<\/li>\n\n\n\n<li><strong>For any organization handling GDPR access requests:<\/strong> You are not automatically required to copy complete documents (emails, reports). Providing a clear overview or summary of the personal data processed may suffice. You must only provide the document itself if the context is \u201cindispensable\u201d for understanding the data.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-veelgestelde-vragen-faq\">Frequently asked questions (FAQ)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Is the DPA in Belgium the only authority that adjudicates data protection complaints?<\/strong><br>No. Although the DPA is the general regulator for the GDPR, there are specific authorities for certain sectors. As this ruling confirms, the Standing Committee I has jurisdiction over data processing under the Security Clearance Act.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Does the right of access (Art. 15 GDPR) mean that I may always ask for a copy of the entire document (e.g., an e-mail)?<\/strong> <br>Not automatic. You are entitled to a copy of your personal data being processed. You are only entitled to a copy of the entire document if it is \u201cindispensable\u201d to understand the data and verify the lawfulness of the processing. The controller may also provide a summary.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Has the Market Court now stated that sharing sensitive information about a criminal case with my management is permitted?<\/strong> <br>No. The Market Court did not rule on this issue on the merits. It overturned the DPA's decision only because the DPA lacked jurisdiction to adjudicate this issue and because the DPA did not adequately justify its decision on the right of access. The question of whether the security officer was allowed to share the reasoning remains unanswered in this ruling.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusie\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This ruling is an important procedural victory for the institution complained of and a clear vindication for the DPA. It more sharply delineates the powers between the DPA and Committee I and nuances the practical scope of the right of access under the GDPR.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\">Are you a company facing a complex AVG request, a data breach or an investigation by the DPA? Our attorneys specializing in privacy law and data protection are ready to analyze your case and defend your interests. Feel free to contact us for an initial consultation.<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Wanneer een werknemer een klacht indient over de verwerking van zijn persoonsgegevens, is de Gegevensbeschermingsautoriteit (GBA) doorgaans de bevoegde instantie. Een arrest van 3 september 2025 van het Marktenhof in Brussel (de beroepsinstantie voor GBA-beslissingen) nuanceert dit echter. Het Hof vernietigde een volledige GBA-beslissing tegen een overheidsinstelling. De redenen zijn belangrijk voor elke organisatie: ten [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":101220,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[61],"tags":[],"class_list":["post-101219","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie - ICT Rechtswijzer Advocaat<\/title>\n<meta name=\"description\" content=\"Het Marktenhof vernietigt een GBA-beslissing. Lees waarom de GBA onbevoegd was voor dataverwerking bij veiligheidsmachtigingen en wat het AVG-inzagerecht (recht op kopie) precies inhoudt.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ictrechtswijzer.be\/en\/is-the-gba-competent-for-alle-data-processing-a-ruling-on-security-clearances-and-the-right-to-a-copy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie\" \/>\n<meta property=\"og:description\" content=\"Het Marktenhof vernietigt een GBA-beslissing. Lees waarom de GBA onbevoegd was voor dataverwerking bij veiligheidsmachtigingen en wat het AVG-inzagerecht (recht op kopie) precies inhoudt.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ictrechtswijzer.be\/en\/is-the-gba-competent-for-alle-data-processing-a-ruling-on-security-clearances-and-the-right-to-a-copy\/\" \/>\n<meta property=\"og:site_name\" content=\"ICT Rechtswijzer Advocaat\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-17T12:13:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-17T12:18:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/building-3285254_1280.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"850\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joris Deene\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joris Deene\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/\"},\"author\":{\"name\":\"Joris Deene\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\"},\"headline\":\"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie\",\"datePublished\":\"2025-11-17T12:13:47+00:00\",\"dateModified\":\"2025-11-17T12:18:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/\"},\"wordCount\":1330,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/building-3285254_1280.jpg\",\"articleSection\":[\"GDPR - AVG\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/\",\"name\":\"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie - ICT Rechtswijzer Advocaat\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/building-3285254_1280.jpg\",\"datePublished\":\"2025-11-17T12:13:47+00:00\",\"dateModified\":\"2025-11-17T12:18:36+00:00\",\"description\":\"Het Marktenhof vernietigt een GBA-beslissing. Lees waarom de GBA onbevoegd was voor dataverwerking bij veiligheidsmachtigingen en wat het AVG-inzagerecht (recht op kopie) precies inhoudt.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/building-3285254_1280.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/building-3285254_1280.jpg\",\"width\":1280,\"height\":850},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"name\":\"ICT Rechtswijzer Advocaat\",\"description\":\"Advocaten in IP, AI, IT, privacy &amp; media\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"LegalService\"],\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\",\"name\":\"ICT Rechtswijzer\",\"alternateName\":\"ICT Rechtswijzer, kennisplatform van Everest Advocaten\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"width\":638,\"height\":479,\"caption\":\"ICT Rechtswijzer\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/be.linkedin.com\\\/company\\\/everest-law\",\"https:\\\/\\\/www.everest-law.eu\\\/\"],\"description\":\"Kennisplatform van het departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht van Everest Advocaten, onder leiding van mr. Joris Deene.\",\"parentOrganization\":{\"@type\":\"LegalService\",\"name\":\"Everest Advocaten\",\"url\":\"https:\\\/\\\/www.everest-law.eu\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Bollebergen 2A bus 20\",\"postalCode\":\"9052\",\"addressLocality\":\"Gent\",\"addressCountry\":\"BE\"}}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\",\"name\":\"Joris Deene\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"caption\":\"Joris Deene\"},\"description\":\"Mr. Joris Deene is advocaat-partner bij Everest Advocaten en leidt het departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht. ICT Rechtswijzer is het kennisplatform van dat departement. Joris publiceert en doceert over auteursrecht, merkenrecht, softwarerecht, de AVG, de AI-Act, de DSA en het mediarecht.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/joris-deene-5144096\\\/\"],\"honorificPrefix\":\"Mr.\",\"knowsAbout\":[\"intellectuele eigendom\",\"auteursrecht\",\"merkenrecht\",\"IT-recht\",\"AI-recht\",\"gegevensbescherming\",\"AVG\",\"mediarecht\",\"digitaledienstenverordening\",\"AI-verordening\"],\"knowsLanguage\":[\"Nederlands\",\"Engels\",\"Frans\"],\"jobTitle\":\"Advocaat-partner, hoofd departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht\",\"worksFor\":\"Everest Advocaten\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/en\\\/author\\\/joris-deene\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Is the GBA authorized for any data processing? A ruling on security clearances and the right to a copy - ICT Law Guide Advocate","description":"The Markets Court overturns a GBA decision. Read why the GBA was unauthorized for data processing in security clearances and exactly what the AVG right of inspection (right to copy) means.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ictrechtswijzer.be\/en\/is-the-gba-competent-for-alle-data-processing-a-ruling-on-security-clearances-and-the-right-to-a-copy\/","og_locale":"en_US","og_type":"article","og_title":"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie","og_description":"Het Marktenhof vernietigt een GBA-beslissing. Lees waarom de GBA onbevoegd was voor dataverwerking bij veiligheidsmachtigingen en wat het AVG-inzagerecht (recht op kopie) precies inhoudt.","og_url":"https:\/\/www.ictrechtswijzer.be\/en\/is-the-gba-competent-for-alle-data-processing-a-ruling-on-security-clearances-and-the-right-to-a-copy\/","og_site_name":"ICT Rechtswijzer Advocaat","article_published_time":"2025-11-17T12:13:47+00:00","article_modified_time":"2025-11-17T12:18:36+00:00","og_image":[{"width":1280,"height":850,"url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/building-3285254_1280.jpg","type":"image\/jpeg"}],"author":"Joris Deene","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joris Deene","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#article","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/"},"author":{"name":"Joris Deene","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685"},"headline":"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie","datePublished":"2025-11-17T12:13:47+00:00","dateModified":"2025-11-17T12:18:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/"},"wordCount":1330,"publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/building-3285254_1280.jpg","articleSection":["GDPR - AVG"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/","url":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/","name":"Is the GBA authorized for any data processing? A ruling on security clearances and the right to a copy - ICT Law Guide Advocate","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#primaryimage"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/building-3285254_1280.jpg","datePublished":"2025-11-17T12:13:47+00:00","dateModified":"2025-11-17T12:18:36+00:00","description":"The Markets Court overturns a GBA decision. Read why the GBA was unauthorized for data processing in security clearances and exactly what the AVG right of inspection (right to copy) means.","breadcrumb":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#primaryimage","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/building-3285254_1280.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/building-3285254_1280.jpg","width":1280,"height":850},{"@type":"BreadcrumbList","@id":"https:\/\/www.ictrechtswijzer.be\/is-de-gba-bevoegd-voor-elke-dataverwerking-een-arrest-over-veiligheidsmachtigingen-en-het-recht-op-een-kopie\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ictrechtswijzer.be\/"},{"@type":"ListItem","position":2,"name":"Is de GBA bevoegd voor elke dataverwerking? Een arrest over veiligheidsmachtigingen en het recht op een kopie"}]},{"@type":"WebSite","@id":"https:\/\/www.ictrechtswijzer.be\/#website","url":"https:\/\/www.ictrechtswijzer.be\/","name":"ICT Lawyer","description":"Lawyers in IP, AI, IT, privacy &amp; media","publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ictrechtswijzer.be\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","LegalService"],"@id":"https:\/\/www.ictrechtswijzer.be\/#organization","name":"ICT Legal Guide","alternateName":"ICT Rechtswijzer, kennisplatform van Everest Advocaten","url":"https:\/\/www.ictrechtswijzer.be\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","width":638,"height":479,"caption":"ICT Rechtswijzer"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/be.linkedin.com\/company\/everest-law","https:\/\/www.everest-law.eu\/"],"description":"Knowledge platform of the Intellectual Property, IT Law, AI Law, Data Protection, and Media Law department at Everest Advocaten, led by Joris Deene, Esq.","parentOrganization":{"@type":"LegalService","name":"Everest Advocaten","url":"https:\/\/www.everest-law.eu","address":{"@type":"PostalAddress","streetAddress":"Bollebergen 2A bus 20","postalCode":"9052","addressLocality":"Gent","addressCountry":"BE"}}},{"@type":"Person","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685","name":"Joris Deene","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","caption":"Joris Deene"},"description":"Mr. Joris Deene is a partner at Everest Attorneys and heads the department of intellectual property, IT law, AI law, data protection, and media law. ICT Legal Guide is that department\u2019s knowledge platform. Joris publishes and teaches on copyright law, trademark law, software law, the GDPR, the AI Act, the DSA, and media law.","sameAs":["https:\/\/www.linkedin.com\/in\/joris-deene-5144096\/"],"honorificPrefix":"Mr.","knowsAbout":["intellectuele eigendom","auteursrecht","merkenrecht","IT-recht","AI-recht","gegevensbescherming","AVG","mediarecht","digitaledienstenverordening","AI-verordening"],"knowsLanguage":["Nederlands","Engels","Frans"],"jobTitle":"Advocaat-partner, hoofd departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht","worksFor":"Everest Advocaten","url":"https:\/\/www.ictrechtswijzer.be\/en\/author\/joris-deene\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/101219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/comments?post=101219"}],"version-history":[{"count":0,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/101219\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media\/101220"}],"wp:attachment":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media?parent=101219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/categories?post=101219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/tags?post=101219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}