Data Protection And Cybersecurity Laws In Netherlands

Data protection

1.Local data protection laws and scope

• General Data Protection Regulation ("GDPR") (Algemene Verordening Gegevensbescherming)
• The Dutch GDPR Implementation Act ("DGIA") (Uitvoeringswet Algemene verordening gegevensbescherming)
• The DGIA implements the GDPR. The DGIA includes, for example, exceptions for the processing of special categories of personal data and data relating to criminal law matters and exceptions to the data subject's rights and controller's obligations.
• Dutch Telecommunications Act ("TA"), (Telecommunicatiewet)

The TA implements EU ePrivacy Directive 2002/58/EC and also includes provisions on unsolicited electronic communications and the use of cookies (and similar techniques). The TA also imposes several requirements on providers of public electronic communications networks and publicly available electronic communication services with regard to the processing of personal data.