Privacy

You need a Data Processing Agreement as soon as you have another party (a “processor”) process personal data on your behalf — for example, a payroll administrator, a cloud service (SaaS), or a freelancer with access to...

The Dutch Data Protection Authority has made the data breach notification form more user-friendly — including intermediate saving and follow-up questions based on previous answers — but correctly reporting a...

The European Union has established a regulatory framework for artificial intelligence (AI) that classifies AI systems according to risk: minimal, limited, high, and unacceptable. The higher the risk to safety or...

Truly anonymized data falls outside the scope of the GDPR, but in practice, people often think they are anonymizing while actually pseudonymizing — and in that case, the GDPR applies. Four persistent misconceptions:...

At online store Allekabels.nl, the entire database containing data of approximately 3.6 million customers, including passwords, was leaked — the largest Dutch password data breach to date. The lesson: report a...

The right of access gives people the right to view their personal data free of charge to verify whether an organization is processing the correct data correctly. In principle, you must within...

Booking.com was fined 475,000 euros because it failed to report a data breach to the Dutch Data Protection Authority within the statutory 72 hours. The lesson: a data breach must be reported within 72 hours...

Foreign webshops must also comply with European consumer law when selling to EU consumers. The ACM forced AliExpress to amend its terms of sale: consumers must go to a court in...

Personal data of millions of Dutch people may have been stolen from an ICT service provider for car garages — one of the largest Dutch data breaches ever. The lesson for entrepreneurs: as the data controller, you are personally responsible...

You may not simply call yourself “Royal” or “Purveyor to the Court.” These titles are awarded by the King to companies that have existed for at least 100 years and hold a prominent, impeccable position. Carrys...