Dutch Data Protection Authority

<h2 id="legal-task">Legal task</h2>
<p>The Authority for Personal Data has the statutory duty to assess whether persons and organizations, including government organisations, comply with the Dutch Personal Data Protection Act. The AP also supervises compliance with the Police Data Act, the Municipal Personal Records Database Act and all other statutory regulations concerning the processing of personal data.
</p>
<h2 id="name-changes">Name changes</h2>
<p>The organization was called the <i>College bescherming persoonsgegevens</i> (CBP) until 2016. The CBP followed the <i>Registratiekamer</i> in 2001. With the change of name as per 1 January 2016, the body was granted the power to impose fines for violations of the Personal Data Protection Act (Wbp). These changes were a result of drastic changes to that law.<a class="footnote-ref" id="fnref:2" href="#fn:2"><sup>2</sup></a> In fact, the name change of 2016 only applies to 'in society', according to article 51 of the Wbp. That article still gives 'College bescherming persoonsgegevens' as a formal name.<a class="footnote-ref" id="fnref:3" href="#fn:3"><sup>3</sup></a>
</p>
<h2 id="supervision-of-compliance-with-the-personal-data-protection-act">Supervision of compliance with the Personal Data Protection Act</h2>
<p>The Personal Data Protection Act means that an organization may only process personal data that is demonstrably necessary for the organization and for which no explicit prohibition exists. Examples of this are medical, sexual, political data and data about membership of a trade union. For governments, the term 'demonstrably necessary' means that there must be a legal basis for the processing of  data
</p><p>The supervisory functions mean that the Dutch Data Protection Authority can compel companies and governments to comply with the requirements of the Wbp. The AP can impose periodic penalty payments for this.<a class="footnote-ref" id="fnref:4" href="#fn:4"><sup>4</sup></a> Furthermore, the AP has a public register of data processing if it deviates from the usual processing. The AP can impose an administrative fine for not registering non-exempt processing. In all cases are supervised by court which makes the final decision.
</p><p>In addition, the AP has the task of advising ministers and the House of Representatives, both solicited and unsolicited, on legislative proposals, in the light of the Wbp or other applicable rules.
</p><p>The obligation to report data leaks by data controllers and processors to the Dutch Data Protection Authority is regulated by the inclusion of additional provisions in the WBP per 1/1/2016.<a class="footnote-ref" id="fnref:5" href="#fn:5"><sup>5</sup></a>
</p>
<h2 id="members">Members</h2>
<p>The first members of the Data Protection Board were <a href="/facts/Peter_Hustinx/YGH3hRQx">Peter Hustinx</a> (chairman), Ulco van de Pol and Jan Willem Broekema (both vice-chairman). Hustinx and Van de Pol came from the Registratiekamer at the establishment of the Dutch DPA. Broekema came from the business sector. Hustinx later became the privacy supervisor for the <a href="/facts/European_Union/6GYcR8qM">European Union</a>. At the end of 2004, Jacob Kohnstamm, former politician, became chairman of the Dutch DPA. The chairman is appointed by royal decree for a period of six years, the two members for four years. On 1 August 2016, Kohnstam was succeeded by Aleid Wolfsen.<a class="footnote-ref" id="fnref:6" href="#fn:6"><sup>6</sup></a>
</p>

<h2 id="external-links">External links</h2>
<ul><li><a href="https://autoriteitpersoonsgegevens.nl">Official website</a> </li></ul>

<h2 id="references">References</h2>

<ol>
<li id="fn:1"><p>"Tasks and powers of the Dutch DPA | Autoriteit Persoonsgegevens". Website Dutch DPA. Retrieved 20 June 2022. <a href="https://www.autoriteitpersoonsgegevens.nl/en/about-dutch-dpa/tasks-and-powers-dutch-dpa" target="_blank">https://www.autoriteitpersoonsgegevens.nl/en/about-dutch-dpa/tasks-and-powers-dutch-dpa</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li>
<li id="fn:2"><p>CBP krijgt boetebevoegdheid en wordt Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl, 28 december 2015 <a href="https://autoriteitpersoonsgegevens.nl/nl/nieuws/cbp-krijgt-boetebevoegdheid-en-wordt-autoriteit-persoonsgegevens" target="_blank">https://autoriteitpersoonsgegevens.nl/nl/nieuws/cbp-krijgt-boetebevoegdheid-en-wordt-autoriteit-persoonsgegevens</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li>
<li id="fn:3"><p>Artikel 51 Wet bescherming persoonsgegevens, wetten.overheid.nl. Geraadpleegd op 14 januari 2016 <a href="http://wetten.overheid.nl/BWBR0011468/geldigheidsdatum_01-01-2016#Hoofdstuk9_Paragraaf1_Artikel51" target="_blank">http://wetten.overheid.nl/BWBR0011468/geldigheidsdatum_01-01-2016#Hoofdstuk9_Paragraaf1_Artikel51</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li>
<li id="fn:4"><p>"Security.NL". www.security.nl. Archived from the original on 30 May 2012. <a href="https://archive.today/20120530035019/http://www.security.nl/artikel/39052/1/%22Privacyreglementen_zijn_chantage%22" target="_blank">https://archive.today/20120530035019/http://www.security.nl/artikel/39052/1/%22Privacyreglementen_zijn_chantage%22</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li>
<li id="fn:5"><p>"Meldplicht datalekken". autoriteitpersoonsgegevens.nl. <a href="https://autoriteitpersoonsgegevens.nl/nl/melden/meldplicht-datalekken" target="_blank">https://autoriteitpersoonsgegevens.nl/nl/melden/meldplicht-datalekken</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li>
<li id="fn:6"><p>"Oud-burgemeester Wolfsen nieuwe voorzitter privacywaakhond - NU - Het laatste nieuws het eerst op NU.nl". www.nu.nl. <a href="http://www.nu.nl/internet/4268837/oud-burgemeester-wolfsen-nieuwe-voorzitter-privacywaakhond.html" target="_blank">http://www.nu.nl/internet/4268837/oud-burgemeester-wolfsen-nieuwe-voorzitter-privacywaakhond.html</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li>
</ol>

Dutch Data Protection Authority open-in-new

Dutch Data Protection Authority