IAB Europe, an association for online advertising companies, was fined 250,000 euros ($282,690) and handed an ultimatum by Belgium’s data watchdog for developing an ad-targeting tool that violated the region’s privacy law.

Subscribe to Ad Age now for award-winning news and insight.

“Harsh sanctions” were necessary because the tool “could, for a large group of citizens, lead to a loss of control over their personal data,” Belgium’s data protection agency said in an emailed statement on Wednesday. In addition to the fine, the ad group was ordered to put in place a “series of remedies” to comply with European Union rules.

IAB Europe’s so-called Transparency and Consent Framework enables websites and publishers to obtain the consent of users for the processing of their personal data for targeted advertising goals. The tool is especially aimed at facilitating real-time bidding, an advertising technology used by publishers.

Companies such as Google have come under increased scrutiny in Europe over the allegedly harmful way people’s data is being processed in advertising transactions. Google is also the focus of an Irish probe into its data use in advertising transactions and announced changes to real-time bidding to better protect people’s privacy.

The EU’s General Data Protection Regulation came into effect in May 2018 and empowered national data watchdogs to levy fines of as much as 4% of a company’s annual sales for the most serious violations.

Subscribe to Ad Age now for award-winning news and insight.

—Bloomberg News