The Belgian Data Protection Authority (DPA) has published its annual report for 2025, detailing internal changes, key cases, and important statistics of the year.
The year 2025 saw the renewal of the DPA's Management Committee, which took office on April 29, 2025, and the development of a "Strategic Plan 2026-2029." The authority also deployed a new document management system for managing data protection officers and data breach notifications. Operationally, the DPA received 1,394 complaints, an increase of 67% compared to 2024, and 1,216 data breach notifications. The Inspection Service initiated 117 cases, while the Dispute Chamber issued 214 decisions, marking a 23% increase.

The DPA paid particular attention to data brokers, with notable decisions concerning "Bisnode" and "FCR Media." In a case related to artificial intelligence, the Dispute Chamber ordered the city of Antwerp to delete data collected through a noise measurement project using voiceprints, considering that this processing of sensitive data was not based on any valid legal basis. The Authorization and Advice Service also issued recommendations on large-scale data processing, notably for smart meters in Wallonia and Brussels, as well as on the proposed European regulation concerning "Communications Control."