My Dutch still isn't strong enough for me to have figured out all the relevant parts of Belgian law, but NMBS' action is clearly in violation of the EU Directive on the Reuse of Public Sector Information. So there is some recourse.