Netherlands
The AP punches above its weight — swift investigations, landmark cross-border decisions
Autoriteit Persoonsgegevens·AP
Data protection framework
CNIL classification: EU or EEA member country
Data protection authority websiteSource: CNIL · Dataset updated 2026-02-11 · Open Licence. Classification reflects the dated source; partial adequacy may cover only specific sectors or organisations.
Enforcement profile
The AP conducts targeted sector investigations and responds to complaints. It prioritises systemic violations over isolated incidents. Investigations typically result in a formal warning before a fine is issued, except in cases of intentional non-compliance or prior warnings ignored.
Notable enforcement decisions
Late notification of a data breach involving personal data of 540,000 hotel guests.
Inadequate privacy information provided to child users of the platform.
Unlawful processing of personal data for personalised advertising without valid consent.
Active regulations
The iconic polder windmill, preserved at Zaanse Schans, is the universal symbol of Dutch landscape engineering and water management heritage.
Enforcement data is based on publicly available decisions and may not reflect every action, appeal, reduction, or subsequent court ruling. Fine amounts are shown as reported at the time of the decision. This information is for intelligence purposes and does not constitute legal advice.