Netflix fined €4.75 million in the Netherlands

The Dutch Data Protection Authority (DPA) fined Netflix €4.75 million for a lack of transparency that violated GDPR requirements. The regulators showed that Netflix didn’t provide transparent information to users, explaining how their personal data is being processed. The claims addressed the company’s conduct between 2018 and 2020, and followed a close review of Netflix’s privacy disclosures during that period. 

‍

The DPA claimed that the company’s policies didn’t provide an adequate explanation to users regarding how the personal information collected by Netflix, which includes email addresses, phone numbers, financial details, and more, was utilized. 

‍

Netflix also failed to handle data access requests properly, providing partial replies and sometimes failing to offer a copy of the user’s data collected by the company. This is yet another example of how challenging data mapping and DSAR management can be, even for leading organizations. 

‍