Checked on September 27, 2026
GDPR in Netherlands
How the GDPR works in Netherlands: the supervisory authority, the national law that supplements the regulation, and where to notify a breach.
- Supervisory authority
- Dutch Data Protection Authority (Autoriteit Persoonsgegevens (AP))
- National law supplementing the GDPR
- GDPR Implementation Act · Uitvoeringswet Algemene verordening gegevensbescherming (UAVG) · Stb. 2018, 144
- Age of digital consent
- 16
- Breach notification
- datalekken.autoriteitpersoonsgegevens.nl/
- National specifics
- Breaches reported via the AP online form within 72 hours; notifier must give name, position, phone and email.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.