Articles about Privacy
Practical legal information for entrepreneurs. Read what to look out for, which steps are sensible, and when legal advice is necessary.
Seven years of GDPR: strict but fair supervision
Privacy
May 13, 2025
Seven years after the introduction of the GDPR, it is clear that privacy legislation is not a paper tiger. The Dutch Data Protection Authority actively enforces and issues fines to a wide range of organizations — from...
Drug and alcohol tests in the workplace: contrary to the GDPR
Privacy
April 15, 2025
Self-testing employees for alcohol or drugs is not permitted for most employers. Test results are health data (special categories of personal data), and for ordinary employers, there is no valid legal basis for this...
What is the right to rectification under the GDPR?
Blog
February 20, 2025
The right to rectification gives individuals the right to have inaccurate personal data corrected or incomplete data completed (Article 16 GDPR). As an organization, you must ensure that the...
The ABC of the AP: everything about the Dutch Data Protection Authority
Privacy
June 20, 2024
The Dutch Data Protection Authority (AP) is the Dutch supervisory body that checks whether companies and the government comply with the GDPR. It does more than supervise: the AP advises, provides...
The different types of personal data unraveled
Privacy
June 18, 2024
Not all personal data is created equal. The GDPR distinguishes between ordinary personal data, special personal data, and criminal data — and in practice, one also speaks of “sensitive” data such as BSN, location and...
Legal guidelines for the use of customer data by marketing agencies
Privacy
June 13, 2024
Sharing customer data with a marketing agency is permitted, but only under strict GDPR conditions: you need a valid legal basis (usually consent for marketing), a clear privacy statement, and a data processing agreement with the agency....
Avoid fines when selling personal data
Privacy
April 18, 2024
The GDPR does not prohibit the sale of personal data, but imposes strict requirements: you need a valid legal basis — for sales, almost always free, specific, informed, and revocable consent —...
AP urges transparent and clear privacy policy
Privacy
February 6, 2024
A privacy policy is mandatory under the GDPR: it explains clearly and accessibly how your company collects, uses, shares, and protects personal data, and what rights data subjects have. The Dutch Data Protection Authority...
The impact of the General Municipal Ordinance and changes to the policy rules
Blog
January 30, 2024
The General Local Ordinance (APV) is the set of local rules with which your municipality regulates public order and safety — from events and terraces to advertising, noise, and opening hours. For...
High AP fine drastically reduced (-93%!)
Privacy
December 21, 2023
A GDPR fine from the Dutch Data Protection Authority can amount to 20 million euros or 4% of global annual turnover — but sometimes it pays to litigate: a fine of 725,000...