Netflix fined 4.75 million euros for not properly informing users about data use 

The fine comes after an investigation revealed violations of the General Data Protection Regulation (GDPR).

While Netflix has since updated its privacy statement and improved its data transparency, the Dutch DPA determined that significant lapses occurred during the investigation period.

Netflix collects a wide range of personal data from its users, including email addresses, phone numbers, payment details, and viewing habits.

However, Dutch DPA said the investigation initiated in 2019 found that:

In addition, when customers requested details about the data collected on them, Netflix’s responses were found lacking in clarity and detail.

“For this reason, the Dutch Data Protection Authority (Dutch DPA) is imposing a fine of 4.75 million euros on the streaming service,” the data protection watchdog said in a statement issued on Wednesday.

Dutch DPA Chairman Aleid Wolfsen emphasized the importance of transparency, especially for a global company like Netflix with billions in revenue and millions of users.

“A company like Netflix must explain properly to its customers how it handles their personal data. That must be crystal clear—especially if a customer asks about it. And that was not in order,” Wolfsen stated.

The investigation was triggered by complaints filed by None of Your Business (noyb), an Austrian privacy advocacy group.

The sanction highlights the increasing scrutiny under GDPR regulations and the importance of transparency for companies handling personal data.

The increasing data protection enforcement happening in Europe is also signaling to the Nigerian data protection agency the need to pay closer attention to the way these multinationals are handling Nigerians’ data and take appropriate measures under the Nigeria Data Protection Act.