The Dutch Data Protection Authority (DPA), a regulatory body for the Netherlands, announced on December 18 that it has fined Netflix €4.75 million (around $4.98 million) for failing to adequately inform customers about its use of their personal data between 2018 and 2020.

According to the DPA, an investigation launched in 2019 revealed that Netflix's privacy statement did not sufficiently explain how the company handled user data. Additionally, customers who inquired about the specific data Netflix collected were not provided with adequate information, both of which constitute violations of the General Data Protection Regulation (GDPR).

"Netflix did not inform customers clearly enough in its privacy statement about what exactly Netflix does with those data," the DPA said in a statement.

Netflix has since updated its privacy practices, but the streaming giant objected to the fine.