EU Commission: Belgium Data Protection Authority lacks independence
The Commission has decided to send a reasoned opinion to Belgium for failing to ensure full independence of its Data Protection Authority. The Commission considers that Belgium violates Article 52 of the General Data Protection Regulation (GDPR), which states that the data protection supervisory authority shall perform its tasks and exercise its powers independently.
The independence of data protection authorities requires that their members are free from any external influence or incompatible occupation. However, some members of the Belgian Data Protection Authority currently cannot be regarded as free from external influence because they either report to a management committee depending on the Belgian government, they have taken part in governmental projects on COVID-19 contact tracing, or they are members of the Information Security Committee.
Source: October infringements package: key decisions
