{"id":101417,"date":"2025-11-27T11:44:13","date_gmt":"2025-11-27T10:44:13","guid":{"rendered":"https:\/\/www.ictrechtswijzer.be\/?p=101417"},"modified":"2025-11-27T14:35:53","modified_gmt":"2025-11-27T13:35:53","slug":"may-a-data-broker-resell-personal-data-based-on-an-old-contract","status":"publish","type":"post","link":"https:\/\/www.ictrechtswijzer.be\/en\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/","title":{"rendered":"May a data broker resell personal data based on an old contract?"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Data brokers and marketing companies often rely on outdated databases and general terms and conditions from the past to trade personal data. However, in a decision of 27 November 2025 (<a href=\"https:\/\/www.gegevensbeschermingsautoriteit.be\/publications\/beslissing-ten-gronde-nr.-199-2025.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">No. 199\/2025<\/a>), the Belgian Data Protection Authority (DPA) sent a clear message: without explicit, free, and specific consent, the resale of data for direct marketing purposes is unlawful. A contract with a supplier does not suffice as proof of consent.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-de-feiten-oude-data-nieuwe-regels\">The facts: old dates, new rules<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The case revolves around a citizen's complaint against Infobel, a well-known commercial data broker<sup><\/sup>. The complainant found that his personal data (name, address, phone number) were being processed by Infobel and resold to third parties for direct marketing purposes, without his ever having given direct consent to Infobel to do so<sup><\/sup>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Infobel defended itself by arguing that it had legally obtained this data through a telecom operator (referred to as \u2018Z4\u2019 in the decision). According to Infobel, in 2006, when taking out its telephone subscription, the complainant would have given its consent through the operator's general terms and conditions<sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup>. Infobel relied on contracts with this operator and argued that responsibility for consent lay with the source<sup><\/sup>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The key question was whether a data broker may hide behind contractual warranties from a supplier and past implied consent (\u2018opt-out\u2019) to commercially exploit data under the current <a href=\"https:\/\/www.ictrechtswijzer.be\/en\/data-protection\/\" target=\"_blank\" rel=\"noreferrer noopener\">General Data Protection Regulation (GDPR)<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-de-beslissing-geen-bewijs-geen-verwerking\">The decision: no evidence, no processing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA's Litigation Chamber ruled scathingly against Infobel's practices. The DPA found that Infobel violated Article 5.1.a (lawfulness), Article 6 (legal basis) and Article 24 (accountability) of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The main pillars of the decision are:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Invalid consent:<\/strong> The DPA ruled that so-called consent through the operator's terms and conditions did not suffice. The terms and conditions employed an \u201copt-out\u201d system (customers had to ask not to be listed), which under the GDPR does not count as an unambiguous active act.<\/li>\n\n\n\n<li><strong>Lack of Information:<\/strong> The complainant was never informed that specifically Infobel would process his data. For informed consent, the identity of the data controller must be known.<\/li>\n\n\n\n<li><strong>Accountability:<\/strong> Infobel itself could not produce any document demonstrating the complainant's expression of will. Merely referring to contracts with the supplier (Z4) does not relieve the data broker of the obligation to prove the validity of the consent itself. Since the data transfer predated the GDPR (2006), full responsibility for the current use lies with the party now exploiting the data (Infobel), and not with the original source.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA imposed an administrative fine of 40,000 euros on Infobel and ordered the removal of the unlawfully processed data, as well as notification of this decision to all parties who had purchased the data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-juridische-analyse-en-duiding\">Legal analysis and interpretation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This decision confirms and strengthens the case law surrounding the quality of consent in the GDPR era. It marks the definitive end of the era when companies could rely on \u201cdormant\u201d data collected under pre-GDPR law, where silence was often interpreted as consent.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-de-criteria-voor-toestemming\">The criteria for consent<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA strictly applies the four cumulative conditions for consent, as defined in Article 4.11 GDPR and clarified in <a href=\"https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/guidelines\/guidelines-052020-consent-under-regulation-2016679_nl\" target=\"_blank\" rel=\"noreferrer noopener\">the guidelines of the European Data Protection Board (EDPB)<\/a>:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Free:<\/strong> Consent should not be tied to the performance of a contract if it is not necessary. In this case, the marketing consent was intertwined with the telephone contract.<\/li>\n\n\n\n<li><strong>Specifically:<\/strong> A general permission for \u201ccommercialization\u201d in general terms and conditions is insufficient. There must be specific permission for resale to third parties such as Infobel.<\/li>\n\n\n\n<li><strong>Informed:<\/strong> The data subject must know who is processing the data. If the name of the data broker is not in the original notification, the consent is invalid.<\/li>\n\n\n\n<li><strong>Unambiguous:<\/strong> Silence, pre-ticked boxes or failure to opt-out do not constitute legally valid consent.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-de-actieve-onderzoeksplicht-van-de-datamakelaar\">The data broker's active duty of inquiry<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Legally, the most interesting aspect is the interpretation of Article 24 GDPR. The DPA states that a data controller (in this case, the buyer of the data) has an independent burden of proof. One cannot hide behind guarantees in a B2B contract with the supplier. This means that any organization purchasing external databases must perform due diligence on the origin of the consent (the \u2018opt-in\u2019 evidence). If this evidence is missing, then the processing is unlawful.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DPA also refers to the Proximus ruling of the Court of Justice (<a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf;jsessionid=9625281040C201CDAC89502B7391299E?text=&amp;docid=267605&amp;pageIndex=0&amp;doclang=NL&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=12783793\" target=\"_blank\" rel=\"noreferrer noopener\">C-129\/21<\/a>), which already ruled that consent for publication in a telephone directory does not automatically apply to other commercial purposes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-wat-dit-concreet-betekent\">What this specifically means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This decision has implications for various parties in the economy:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>For consumers:<\/strong> You have more control than you think. If you receive marketing from companies you do not know, it is not enough that they refer to an \u201caffiliate.\u201d They must prove that you specifically gave permission to them. You can successfully demand the deletion of your data as well as ask who your data was sold to.<\/li>\n\n\n\n<li><strong>For data brokers and marketing agencies:<\/strong> The business model of buying and selling databases without hard \u2018opt-in\u2019 evidence has become untenable. Note that databrokering in itself is not illegal, but the lack of this evidence is problematic. You risk not only fines, but also orders to destroy your database. You must proactively verify that the individuals in your purchased files meet AVG standards, regardless of what your vendor contractually promises.<\/li>\n\n\n\n<li><strong>For companies that collect data (such as telecom):<\/strong> General terms stating that data may be \u201ccommercialized\u201d are legally worthless for resale to third parties if no specific, granular opt-in is provided.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-veelgestelde-vragen-faq\">Frequently Asked Questions (FAQ)<\/h2>\n\n\n\n<h6 class=\"wp-block-heading\" id=\"h-mag-een-bedrijf-mijn-gegevens-doorverkopen-voor-marketing\">May a company resell my data for marketing?<\/h6>\n\n\n\n<p class=\"wp-block-paragraph\">No, not just like that. Under the GDPR, this requires your free, specific, informed and unambiguous consent. You must have explicitly said \u2018yes\u2019 to the resale to that specific party or category of parties.<\/p>\n\n\n\n<h6 class=\"wp-block-heading\" id=\"h-is-een-opt-out-systeem-geldig-onder-de-avg\">Is an \u2018opt-out\u2019 system valid under the GDPR?<\/h6>\n\n\n\n<p class=\"wp-block-paragraph\">No. The system that requires you to take action to not receive advertising (e.g., \u201cuncheck this box if you don't want a newsletter\u201d) is prohibited. Consent requires an active action by the user (opt-in).<\/p>\n\n\n\n<h6 class=\"wp-block-heading\" id=\"h-wat-als-ik-jaren-geleden-toestemming-gaf-via-algemene-voorwaarden\">What if I gave \u2018consent\u2019 via terms and conditions years ago?<\/h6>\n\n\n\n<p class=\"wp-block-paragraph\">That consent is probably no longer valid. If the consent was not specific at the time or was \u2018hidden\u2019 in a contract, it does not meet current GDPR requirements. Companies should re-evaluate old consents and renew if necessary<sup><\/sup><sup><\/sup><sup><\/sup><sup><\/sup>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusie\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The decision against Infobel makes it clear that the DPA takes strict action against the trading of personal data without a solid legal basis. Accountability weighs heavily: anyone processing data must be able to prove consent. \u201cWe bought the data in good faith\u201d is no longer a valid defense.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.ictrechtswijzer.be\/en\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">Are you facing unlawful use of your personal data or do you, as a company, wish to make your marketing activities GDPR-proof? Our attorneys, specialized in privacy law and data protection, are ready to analyze your case and defend your interests. Please feel free to contact us for an initial advice.<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Datamakelaars en marketingbedrijven beroepen zich vaak op verouderde databases en algemene voorwaarden uit het verleden om persoonsgegevens te verhandelen. De Belgische Gegevensbeschermingsautoriteit (GBA) heeft in een beslissing van 27 november 2025 (nr. 199\/2025) echter een duidelijk signaal gegeven: zonder expliciete, vrije en specifieke toestemming is het doorverkopen van data voor direct marketing onrechtmatig. Een contract [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":101418,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[61],"tags":[],"class_list":["post-101417","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract? - ICT Rechtswijzer Advocaat<\/title>\n<meta name=\"description\" content=\"Mag een datamakelaar uw gegevens doorverkopen op basis van een oud contract? De GBA oordeelt streng: zonder expliciete toestemming riskeert men boetes. Lees de analyse\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ictrechtswijzer.be\/en\/may-a-data-broker-resell-personal-data-based-on-an-old-contract\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract?\" \/>\n<meta property=\"og:description\" content=\"Mag een datamakelaar uw gegevens doorverkopen op basis van een oud contract? De GBA oordeelt streng: zonder expliciete toestemming riskeert men boetes. Lees de analyse\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ictrechtswijzer.be\/en\/may-a-data-broker-resell-personal-data-based-on-an-old-contract\/\" \/>\n<meta property=\"og:site_name\" content=\"ICT Rechtswijzer Advocaat\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-27T10:44:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-27T13:35:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/business-man-1572059_1280.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"853\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joris Deene\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joris Deene\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/\"},\"author\":{\"name\":\"Joris Deene\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\"},\"headline\":\"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract?\",\"datePublished\":\"2025-11-27T10:44:13+00:00\",\"dateModified\":\"2025-11-27T13:35:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/\"},\"wordCount\":1133,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/business-man-1572059_1280.jpg\",\"articleSection\":[\"GDPR - AVG\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/\",\"name\":\"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract? - ICT Rechtswijzer Advocaat\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/business-man-1572059_1280.jpg\",\"datePublished\":\"2025-11-27T10:44:13+00:00\",\"dateModified\":\"2025-11-27T13:35:53+00:00\",\"description\":\"Mag een datamakelaar uw gegevens doorverkopen op basis van een oud contract? De GBA oordeelt streng: zonder expliciete toestemming riskeert men boetes. Lees de analyse\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/business-man-1572059_1280.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/business-man-1572059_1280.jpg\",\"width\":1280,\"height\":853},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#website\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"name\":\"ICT Rechtswijzer Advocaat\",\"description\":\"Advocaten in IP, AI, IT, privacy &amp; media\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#organization\",\"name\":\"ICT Rechtswijzer Advocaat\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg\",\"width\":638,\"height\":479,\"caption\":\"ICT Rechtswijzer Advocaat\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/jorisdeene\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/#\\\/schema\\\/person\\\/29025dc007e8d33a89422580a534d685\",\"name\":\"Joris Deene\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g\",\"caption\":\"Joris Deene\"},\"description\":\"Advocaat-partner bij Everest Advocaten\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/joris-deene-5144096\\\/\"],\"url\":\"https:\\\/\\\/www.ictrechtswijzer.be\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"May a data broker resell personal data on the basis of an old contract? - ICT Legal Guide Lawyer","description":"May a data broker resell your data based on an old contract? The GBA rules strictly: without explicit consent, you risk fines. Read the analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ictrechtswijzer.be\/en\/may-a-data-broker-resell-personal-data-based-on-an-old-contract\/","og_locale":"en_US","og_type":"article","og_title":"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract?","og_description":"Mag een datamakelaar uw gegevens doorverkopen op basis van een oud contract? De GBA oordeelt streng: zonder expliciete toestemming riskeert men boetes. Lees de analyse","og_url":"https:\/\/www.ictrechtswijzer.be\/en\/may-a-data-broker-resell-personal-data-based-on-an-old-contract\/","og_site_name":"ICT Rechtswijzer Advocaat","article_published_time":"2025-11-27T10:44:13+00:00","article_modified_time":"2025-11-27T13:35:53+00:00","og_image":[{"width":1280,"height":853,"url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/business-man-1572059_1280.jpg","type":"image\/jpeg"}],"author":"Joris Deene","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joris Deene","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#article","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/"},"author":{"name":"Joris Deene","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685"},"headline":"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract?","datePublished":"2025-11-27T10:44:13+00:00","dateModified":"2025-11-27T13:35:53+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/"},"wordCount":1133,"publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/business-man-1572059_1280.jpg","articleSection":["GDPR - AVG"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/","url":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/","name":"May a data broker resell personal data on the basis of an old contract? - ICT Legal Guide Lawyer","isPartOf":{"@id":"https:\/\/www.ictrechtswijzer.be\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#primaryimage"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/business-man-1572059_1280.jpg","datePublished":"2025-11-27T10:44:13+00:00","dateModified":"2025-11-27T13:35:53+00:00","description":"May a data broker resell your data based on an old contract? The GBA rules strictly: without explicit consent, you risk fines. Read the analysis","breadcrumb":{"@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#primaryimage","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/business-man-1572059_1280.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2025\/11\/business-man-1572059_1280.jpg","width":1280,"height":853},{"@type":"BreadcrumbList","@id":"https:\/\/www.ictrechtswijzer.be\/mag-een-datamakelaar-persoonsgegevens-doorverkopen-op-basis-van-een-oud-contract\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ictrechtswijzer.be\/"},{"@type":"ListItem","position":2,"name":"Mag een datamakelaar persoonsgegevens doorverkopen op basis van een oud contract?"}]},{"@type":"WebSite","@id":"https:\/\/www.ictrechtswijzer.be\/#website","url":"https:\/\/www.ictrechtswijzer.be\/","name":"ICT Lawyer","description":"Lawyers in IP, AI, IT, privacy &amp; media","publisher":{"@id":"https:\/\/www.ictrechtswijzer.be\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ictrechtswijzer.be\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.ictrechtswijzer.be\/#organization","name":"ICT Lawyer","url":"https:\/\/www.ictrechtswijzer.be\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/","url":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","contentUrl":"https:\/\/www.ictrechtswijzer.be\/wp-content\/uploads\/2018\/08\/joris-deene-auteursrecht-in-een-digitale-omgeving-1-638.jpg","width":638,"height":479,"caption":"ICT Rechtswijzer Advocaat"},"image":{"@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/in\/jorisdeene\/"]},{"@type":"Person","@id":"https:\/\/www.ictrechtswijzer.be\/#\/schema\/person\/29025dc007e8d33a89422580a534d685","name":"Joris Deene","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7073c8d7ef4db19fbc2d462ac2571a2b0a3e5c89329cba99b4d3caf0bcd7cfc1?s=96&d=mm&r=g","caption":"Joris Deene"},"description":"Attorney-partner at Everest Attorneys","sameAs":["https:\/\/www.linkedin.com\/in\/joris-deene-5144096\/"],"url":"https:\/\/www.ictrechtswijzer.be\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/101417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/comments?post=101417"}],"version-history":[{"count":0,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/posts\/101417\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media\/101418"}],"wp:attachment":[{"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/media?parent=101417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/categories?post=101417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ictrechtswijzer.be\/en\/wp-json\/wp\/v2\/tags?post=101417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}