Personal Data Protection Act

The Personal Data Protection Act (Wet bescherming persoonsgegevens – Wbp) regulates how personal data must be handled. The Dutch Data Protection Authority supervises compliance with this law.

What does it Contain?

The Wbp states what organizations can and cannot do with personal data. It also grants rights to individuals. For example, everyone is granted the right to inspect the personal data that an organization processes from him or her.

Duty to notify – Data Breach

Data can leak from databases, because they have been hacked, for example. In the event of such a data breach, personal data may then “end up on the street”. Since 1 January 2016, it has therefore been mandatory for organizations to report data breaches to the Dutch Data Protection Authority on the basis of an addition to the Wbp.

To Lexicon summary