The Dutch Data Protection Authority (DPA) has fined Netflix €4.75 million for failing to adequately inform customers about its use of personal data between 2018 and 2020. Announced on Wednesday, the DPA stated that Netflix violated the General Data Protection Regulation (GDPR) by not clearly explaining its data practices in its privacy statement.
The investigation, initiated in 2019, also revealed insufficient responses to customer queries about the data Netflix collects. The DPA emphasised the importance of transparent communication under GDPR rules.
Netflix has updated its privacy statement and improved its data transparency since the investigation began. However, the company has objected to the fine.
A Netflix spokesperson said, “We have cooperated with the DPA and proactively evolved our privacy information to provide greater clarity.” The case highlights the ongoing need for companies to ensure GDPR compliance and build trust with customers.
