{"id":101344,"date":"2025-11-21T12:22:38","date_gmt":"2025-11-21T11:22:38","guid":{"rendered":"https:\/\/www.ictrechtswijzer.be\/?p=101344"},"modified":"2025-11-21T12:30:45","modified_gmt":"2025-11-21T11:30:45","slug":"is-a-municipality-liable-when-an-official-unlawfully-consults-the-national-register","status":"publish","type":"post","link":"https:\/\/www.ictrechtswijzer.be\/en\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/","title":{"rendered":"Is a municipality liable when an official unlawfully consults the National Register?"},"content":{"rendered":"<p class=\"wp-block-paragraph\">When a municipal official looks into the National Register out of personal curiosity or without a valid reason, not only is the official at fault, but often the municipality itself. According to a decision of the Data Protection Authority (DPA) of 19 November 2025 (<a href=\"https:\/\/www.gegevensbeschermingsautoriteit.be\/publications\/beslissing-ten-gronde-nr.-188-2025.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">No. 188\/2025<\/a>), the municipal government remains the \u2018data controller. It violates the <a href=\"https:\/\/www.ictrechtswijzer.be\/en\/data-protection\/\" target=\"_blank\" rel=\"noreferrer noopener\">General Data Protection Regulation (GDPR)<\/a> when it has insufficient monitoring systems to detect such abuse, even if the employee ignored strict instructions.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-de-feiten-onrechtmatige-inkijkjes-door-ambtenaren\">The facts: unlawful peeks by officials<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This case revolves around a citizen's complaint against a municipality over two incidents in which officials unlawfully sought access to personal data in the National Register.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The facts played out in December 2019:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Incident 1:<\/strong> A population service official accessed the records of the complainant's mother for purely private purposes.<\/li>\n\n\n\n<li><strong>Incident 2:<\/strong> Another official looked at the complainant's identity photo to verify who he was dealing with, purely out of \u201ccaution\u201d because the complainant had sent an e-mail from an address with his deceased father's name.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The municipality admitted the facts and initiated disciplinary proceedings against the officials involved. However, the municipality argued that it itself could not be held liable. According to the board, the officials had overstepped their bounds and should be considered individually responsible.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-de-beslissing-gemeente-blijft-de-eindverantwoordelijke\">The decision: municipality remains ultimately responsible<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA's Litigation Chamber did not follow the DPA ruled that the municipality did and does remain the data controller for data security, even in the case of misuse by staff.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA identified two violations of the GDPR:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Breach of accountability (Accountability - Art. 5.2 GDPR):<\/strong> The municipality could not show that it had taken sufficient measures to secure the use of the National Register.<\/li>\n\n\n\n<li><strong>Lack of appropriate measures (Art. 24.1 GDPR:<\/strong> At the time, the municipality did not have an adequate control system. The software system (SAPHIR) allowed officials to provide only a generic reason (such as \u201cpopulation\u201d) for a search, making targeted control impossible.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Although the officials had signed a confidentiality clause, this was not enough to exonerate the municipality, according to the DPA. The municipality was reprimanded.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-juridische-analyse-en-duiding\">Legal analysis and interpretation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This ruling confirms a strict interpretation of the concept of \u2018data controller\u2019 within public boards.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-1-de-werkgever-als-verwerkingsverantwoordelijke-art-4-7-avg\">1. The employer as \u2018data controller\u2019 (Art. 4.7 GDPR)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A crucial legal point in this decision is the rejection of the argument that the municipality is completely free if an employee exceeds its authority. The DPA states that as long as the employee acts within the context of the means provided by the employer (access to the National Register through municipal software), the employer remains responsible for determining the purpose and means of processing in general. <span style=\"text-decoration: underline;\">Nuance<\/span><strong>:<\/strong> The DPA does note that for the specific tort (the private search), the officials themselves should be considered data controllers because they themselves determined the purpose for this outside of their job duties. However, this does not relieve the municipality of its own liability for the lack of adequate security and control.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-2-de-verplichting-tot-actieve-controle-art-17-wet-rijksregister\">2. The obligation of active control (Art. 17 National Register Act).<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The decision emphasizes that given the sensitivity of the data of 11 million citizens, access to the National Register requires a strict framework. Merely having them sign a \u2018policy\u2019 is insufficient. Boards must comply with the traceability requirement. Article 17 of the <a href=\"https:\/\/www.ejustice.just.fgov.be\/cgi_loi\/change_lg.pl?language=nl&amp;la=N&amp;cn=1983080836&amp;table_name=wet\" target=\"_blank\" rel=\"noreferrer noopener\">National Register Act<\/a> requires that each consultation be logged with a specific reason (finality). A system that allows the use of vague terms (such as \u201cpopulation\u201d or \u201cinternal use\u201d) does not meet the legal requirements because it precludes any verification of finality.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-3-geen-administratieve-geldboete-voor-overheden\">3. No administrative fine for governments<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Although the infringement is serious, the DPA imposes a reprimand and not a fine. The Litigation Chamber reiterates here its position that the Belgian legislator does not allow (for the time being) the imposition of administrative fines on public authorities for infringements committed in the exercise of their public duties<sup><\/sup><sup><\/sup>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-wat-dit-concreet-betekent-voor-uw-organisatie\">What this specifically means for your organization<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This ruling has direct implications for citizens, employees and public administrations alike.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>For public administrations (Municipalities, PCSWs, Police zones):<\/strong> Auditing your log system is crucial. Can you find out why an official opened a specific file? If your software allows you to leave fields blank or select generic reasons, you are in violation. You should conduct periodic audits (e.g., quarterly) of log files. A mere confidentiality statement in the employment contract does not absolve you of liability.<\/li>\n\n\n\n<li><strong>For civil servants and employees:<\/strong> This decision does not mean you are off the hook. In this case, the officials involved were subject to disciplinary sanctions (warning\/disciplinary penalty). Moreover, the DPA ruled that they could also be considered individual data controllers for their particular breach, although in this case the proceedings were only brought against the municipality.<\/li>\n\n\n\n<li><strong>For citizens:<\/strong> You have the right to know who viewed your data. If you suspect that an official or police officer accessed your data privately (e.g., an ex-partner, a neighbor), you can file a complaint. The government must be able to justify who had access and why.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-veelgestelde-vragen-faq\">Frequently Asked Questions (FAQ)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Can a municipality be fined by the DPA?<\/strong> <br>No, for its core functions as a government, it does not. Article 221, \u00a72 of the <a href=\"https:\/\/www.ejustice.just.fgov.be\/cgi\/article_body.pl?language=nl&amp;caller=summary&amp;pub_date=18-09-05&amp;numac=2018040581\" target=\"_blank\" rel=\"noreferrer noopener\">Data Protection Act<\/a> stipulates that the administrative fines under the GDPR do not apply to public authorities and their appointees. However, there is one exception: legal persons under public law who offer goods or services on a market can be fined. For purely administrative tasks, such as the management of the National Register, the immunity from fines does apply (although other sanctions such as a reprimand remain possible).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Is the DPO (Data Protection Officer) responsible for the error?<\/strong> <br>No. In this case, the DPA explicitly ruled that the DPO has an advisory and monitoring role, but does not determine the purposes and means of processing. Even if the DPO was involved in the defense, the municipality as an organization remains solely ultimately responsible for GDPR violations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What should be in the National Register log?<\/strong> <br>Article 17 of the National Register Act is very strict. The register must contain not only the date, time and identity of the user, but also the data consulted, the method of consultation (reading or modification) and the specific purpose (finality) of the consultation. Moreover, this register must be kept for at least 10 years.<br><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusie\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This ruling is a stark warning to any organization in Belgium with access to sensitive government databases. Relying on employee common sense is not enough; there is an active requirement for technical monitoring and logging.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.ictrechtswijzer.be\/en\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">Do you have questions about data protection within the government or are you a victim of unlawful access to your records? Our attorneys specializing in privacy law and administrative law are ready to analyze your situation and provide you with legal assistance. Feel free to contact us for an initial advice<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Wanneer een gemeenteambtenaar uit persoonlijke nieuwsgierigheid of zonder geldige reden in het Rijksregister kijkt, is niet enkel de ambtenaar in fout, maar vaak ook de gemeente zelf. Volgens een beslissing van de Gegevensbeschermingsautoriteit (GBA) van 19 november 2025 (nr. 188\/2025) blijft het gemeentebestuur de &#8216;verwerkingsverantwoordelijke&#8217;. Zij schendt de Algemene Verordening Gegevensbescherming (AVG\/GDPR) wanneer ze onvoldoende [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":101345,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[61],"tags":[],"class_list":["post-101344","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt? - ICT Rechtswijzer Advocaat<\/title>\n<meta name=\"description\" content=\"Is uw gemeente aansprakelijk als een ambtenaar onterecht het Rijksregister raadpleegt? De GBA oordeelt streng. Lees onze juridische analyse over de verantwoordingsplicht, logging en de gevolgen voor besturen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ictrechtswijzer.be\/en\/is-a-municipality-liable-when-an-official-unlawfully-consults-the-national-register\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt?\" \/>\n<meta property=\"og:description\" content=\"Is uw gemeente aansprakelijk als een ambtenaar onterecht het Rijksregister raadpleegt? De GBA oordeelt streng. Lees onze juridische analyse over de verantwoordingsplicht, logging en de gevolgen voor besturen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ictrechtswijzer.be\/en\/is-a-municipality-liable-when-an-official-unlawfully-consults-the-national-register\/\" \/>\n<meta property=\"og:site_name\" content=\"ICT Rechtswijzer Advocaat\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-21T11:22:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-21T11:30:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/woman-4941164_1280.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"854\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joris Deene\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joris Deene\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/\"},\"author\":{\"name\":\"Joris Deene\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\"},\"headline\":\"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt?\",\"datePublished\":\"2025-11-21T11:22:38+00:00\",\"dateModified\":\"2025-11-21T11:30:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/\"},\"wordCount\":1131,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/woman-4941164_1280.jpg\",\"articleSection\":[\"GDPR - AVG\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/\",\"name\":\"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt? - ICT Rechtswijzer Advocaat\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/woman-4941164_1280.jpg\",\"datePublished\":\"2025-11-21T11:22:38+00:00\",\"dateModified\":\"2025-11-21T11:30:45+00:00\",\"description\":\"Is uw gemeente aansprakelijk als een ambtenaar onterecht het Rijksregister raadpleegt? De GBA oordeelt streng. Lees onze juridische analyse over de verantwoordingsplicht, logging en de gevolgen voor besturen.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/woman-4941164_1280.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/woman-4941164_1280.jpg\",\"width\":1280,\"height\":854},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"name\":\"ICT Rechtswijzer Advocaat\",\"description\":\"Advocaten in IP, AI, IT, privacy &amp; media\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"LegalService\"],\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\",\"name\":\"ICT Rechtswijzer\",\"alternateName\":\"ICT Rechtswijzer, kennisplatform van Everest Advocaten\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"width\":638,\"height\":479,\"caption\":\"ICT Rechtswijzer\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/be.linkedin.com\\\/company\\\/everest-law\",\"https:\\\/\\\/www.everest-law.eu\\\/\"],\"description\":\"Kennisplatform van het departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht van Everest Advocaten, onder leiding van mr. Joris Deene.\",\"parentOrganization\":{\"@type\":\"LegalService\",\"name\":\"Everest Advocaten\",\"url\":\"https:\\\/\\\/www.everest-law.eu\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Bollebergen 2A bus 20\",\"postalCode\":\"9052\",\"addressLocality\":\"Gent\",\"addressCountry\":\"BE\"}}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\",\"name\":\"Joris Deene\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"caption\":\"Joris Deene\"},\"description\":\"Mr. Joris Deene is advocaat-partner bij Everest Advocaten en leidt het departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht. ICT Rechtswijzer is het kennisplatform van dat departement. Joris publiceert en doceert over auteursrecht, merkenrecht, softwarerecht, de AVG, de AI-Act, de DSA en het mediarecht.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/joris-deene-5144096\\\/\"],\"honorificPrefix\":\"Mr.\",\"knowsAbout\":[\"intellectuele eigendom\",\"auteursrecht\",\"merkenrecht\",\"IT-recht\",\"AI-recht\",\"gegevensbescherming\",\"AVG\",\"mediarecht\",\"digitaledienstenverordening\",\"AI-verordening\"],\"knowsLanguage\":[\"Nederlands\",\"Engels\",\"Frans\"],\"jobTitle\":\"Advocaat-partner, hoofd departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht\",\"worksFor\":\"Everest Advocaten\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/en\\\/author\\\/joris-deene\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Is a municipality liable when an official unlawfully consults the National Register? - ICT Legal Guide Lawyer","description":"Is your municipality liable if an official wrongfully consults the National Register? The GBA judges harshly. Read our legal analysis on accountability, logging and implications for boards.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ictrechtswijzer.be\/en\/is-a-municipality-liable-when-an-official-unlawfully-consults-the-national-register\/","og_locale":"en_US","og_type":"article","og_title":"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt?","og_description":"Is uw gemeente aansprakelijk als een ambtenaar onterecht het Rijksregister raadpleegt? De GBA oordeelt streng. Lees onze juridische analyse over de verantwoordingsplicht, logging en de gevolgen voor besturen.","og_url":"https:\/\/www.ictrechtswijzer.be\/en\/is-a-municipality-liable-when-an-official-unlawfully-consults-the-national-register\/","og_site_name":"ICT Rechtswijzer Advocaat","article_published_time":"2025-11-21T11:22:38+00:00","article_modified_time":"2025-11-21T11:30:45+00:00","og_image":[{"width":1280,"height":854,"url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/woman-4941164_1280.jpg","type":"image\/jpeg"}],"author":"Joris Deene","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joris Deene","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#article","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/"},"author":{"name":"Joris Deene","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685"},"headline":"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt?","datePublished":"2025-11-21T11:22:38+00:00","dateModified":"2025-11-21T11:30:45+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/"},"wordCount":1131,"publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/woman-4941164_1280.jpg","articleSection":["GDPR - AVG"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/","url":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/","name":"Is a municipality liable when an official unlawfully consults the National Register? - ICT Legal Guide Lawyer","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#primaryimage"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/woman-4941164_1280.jpg","datePublished":"2025-11-21T11:22:38+00:00","dateModified":"2025-11-21T11:30:45+00:00","description":"Is your municipality liable if an official wrongfully consults the National Register? The GBA judges harshly. Read our legal analysis on accountability, logging and implications for boards.","breadcrumb":{"@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#primaryimage","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/woman-4941164_1280.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/woman-4941164_1280.jpg","width":1280,"height":854},{"@type":"BreadcrumbList","@id":"https:\/\/www.ictrechtswijzer.be\/is-een-gemeente-aansprakelijk-wanneer-een-ambtenaar-het-rijksregister-onrechtmatig-raadpleegt\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ictrechtswijzer.be\/"},{"@type":"ListItem","position":2,"name":"Is een gemeente aansprakelijk wanneer een ambtenaar het Rijksregister onrechtmatig raadpleegt?"}]},{"@type":"WebSite","@id":"https:\/\/www.ictrechtswijzer.be\/#website","url":"https:\/\/www.ictrechtswijzer.be\/","name":"ICT Lawyer","description":"Lawyers in IP, AI, IT, privacy &amp; media","publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ictrechtswijzer.be\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","LegalService"],"@id":"https:\/\/www.ictrechtswijzer.be\/#organization","name":"ICT Legal Guide","alternateName":"ICT Rechtswijzer, kennisplatform van Everest Advocaten","url":"https:\/\/www.ictrechtswijzer.be\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","width":638,"height":479,"caption":"ICT Rechtswijzer"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/be.linkedin.com\/company\/everest-law","https:\/\/www.everest-law.eu\/"],"description":"Knowledge platform of the Intellectual Property, IT Law, AI Law, Data Protection, and Media Law department at Everest Advocaten, led by Joris Deene, Esq.","parentOrganization":{"@type":"LegalService","name":"Everest Advocaten","url":"https:\/\/www.everest-law.eu","address":{"@type":"PostalAddress","streetAddress":"Bollebergen 2A bus 20","postalCode":"9052","addressLocality":"Gent","addressCountry":"BE"}}},{"@type":"Person","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685","name":"Joris Deene","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","caption":"Joris Deene"},"description":"Mr. Joris Deene is a partner at Everest Attorneys and heads the department of intellectual property, IT law, AI law, data protection, and media law. ICT Legal Guide is that department\u2019s knowledge platform. Joris publishes and teaches on copyright law, trademark law, software law, the GDPR, the AI Act, the DSA, and media law.","sameAs":["https:\/\/www.linkedin.com\/in\/joris-deene-5144096\/"],"honorificPrefix":"Mr.","knowsAbout":["intellectuele eigendom","auteursrecht","merkenrecht","IT-recht","AI-recht","gegevensbescherming","AVG","mediarecht","digitaledienstenverordening","AI-verordening"],"knowsLanguage":["Nederlands","Engels","Frans"],"jobTitle":"Advocaat-partner, hoofd departement intellectuele eigendom, IT-recht, AI-recht, gegevensbescherming en mediarecht","worksFor":"Everest Advocaten","url":"https:\/\/www.ictrechtswijzer.be\/en\/author\/joris-deene\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/101344","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/comments?post=101344"}],"version-history":[{"count":0,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/101344\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media\/101345"}],"wp:attachment":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media?parent=101344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/categories?post=101344"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/tags?post=101344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}