Fine · Netherlands
Booking.com B.V.: EUR 475,000
- Authority
- Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
- Country
- Netherlands
- Date
- Decision of 10 December 2020
- Amount
- EUR 475,000, as imposed (not converted)
- Appeal status
- Not appealed
- Provisions cited
- Article 33(1)
What the fine was for (summary, not the official text)
Reported a data breach (hotel-staff phishing in the UAE, 4,109 people affected) 22 days late.
Checked against the official source on 28 October 2026.
Only the authority's decision is authoritative. This is reference material, not legal advice.