Privacy

Embedding (framing) content on your website is often permitted without permission, provided the copyright holder has made the work freely and publicly available on the internet themselves — think of a public YouTube video....

If you engage another party to process personal data on your behalf — such as a cloud service provider, accountant, or software supplier — you are required to enter into a data processing agreement that complies...

A data breach can result in not only a fine from the Dutch Data Protection Authority for an organization, but also compensation for the injured party. In the event of a privacy violation, a data subject may suffer non-material damage (such as...

A major data leak in the GGD coronavirus systems, in which employees traded personal data such as BSNs and addresses, showed how important proper security of personal data is — and how strict the Authority...

Have you received an infringement letter because, for example, you used a photo without a license? Respond calmly and correctly: acknowledge receipt, verify that the sender is indeed the rights holder, stop the infringement...

Faces in images are biometric personal data, and processing them is prohibited in principle. A supermarket that used facial recognition to identify shoplifters received a warning from the Dutch Data Protection Authority:...

Mishandling personal data can cost you dearly. Since the GDPR, strict rules apply to anyone who processes personal data — even offline. Five common mistakes lead to complaints,...

In principle, the website owner is liable for unlawful content on a website, not the hosting provider. A hosting company is protected as an intermediary, but must intervene as soon as it knows that content...

Under certain conditions, you can configure web statistics in a privacy-friendly manner so that consent is not required for those analytical cookies. For Google Analytics specifically, there are additional complications, including those concerning the transfer of...

A data breach can cost you dearly. You are obliged to adequately secure personal data, and if things do go wrong, there is a reporting obligation: you must report serious data breaches within 72...