The amendment introduces a notification obligation for security breaches related to personal data held by telecommunication network and service providers, which has become effective today, 5 June 2012. Telecommunication network providers should notify the Dutch Independent Postal and Telecommunications Authority (Onafhankelijke Post en Telecommunicatie Autoriteit) of security breaches which are likely to have a negative impact on privacy. If the security breach is likely to have a negative impact on the privacy of an individual, the provider should also notify the individual(s) concerned.
In the event that the continuity of networks and/or services cannot be guaranteed, the telecommunication provider should also notify the Radio Communications Agency (Agentschap Telecom). To facilitate a one-stop-shop, the Dutch Independent Postal and Telecommunications Authority and the Radio Communications Agency announced the opening of a joint notification centre where telecom providers can notify both authorities simultaneously.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
