Specialized legal assistance for entrepreneurs, organizations, and directors.
View all areas of expertiseLegal assistance with conflicts, claims, negotiations, and proceedings.
View legal assistanceLegal assistance with outstanding invoices, disputed claims, and collection proceedings.
View collectionMeet MKB Juristen, our founders, and the way we organize legal assistance for entrepreneurs.
About SME LawyersRead legal articles, practical tips, and current developments for entrepreneurs and organizations.
Practical legal information for entrepreneurs. Read what to look out for, which steps are sensible, and when legal advice is necessary.
To be GDPR-compliant, virtually every organization needs a number of documents: a data processing agreement, a privacy and cookie statement, privacy regulations, a data breach protocol, and a consent form for visual material. These documents show...
Victims of a data breach are entitled to compensation — not only from the hacker, but often also from the negligent organization that failed to adequately protect the data. The amounts are typically...
Modern lease cars store personal data — such as call, navigation, and app data — that falls under the GDPR. Especially when returning or transferring a lease car, it is crucial that...
Five years after the introduction of the GDPR (May 25, 2018), it is clear: the Netherlands issues relatively few fines, but when one is imposed, it is substantial — and the...
A sub-processor agreement is the GDPR-mandated agreement between a processor and a third party engaged by the processor (the sub-processor), stating how the latter may process the personal data. For example, if your processor engages a...
Storing personal data in the cloud is permitted, but as an organization, you remain responsible for its secure storage — even if you outsource it to a cloud service. That means: bring...
In 2022, the Dutch Data Protection Authority (AP) also handed out substantial GDPR fines, the heaviest being the fine of 3.7 million euros for the Tax and Customs Administration due to the illegal “blacklist” FSV. The...
A DPIA (Data Protection Impact Assessment), also known as GEB, is a mandatory risk assessment that you carry out in advance when data processing is likely to pose a high privacy risk. With a DPIA, you bring...
Customer Due Diligence (CDD) is the client investigation used to determine who you are doing business with and what integrity risks are associated with it. A good CDD policy helps you comply with the rules against...
In the event of a breach of the GDPR, an aggrieved party can not only count on enforcement by the Dutch Data Protection Authority, but also claim damages themselves (Article 82 GDPR) — including for non-material...
