FineMeFine Intelligence
๐Ÿ‡ณ๐Ÿ‡ฑ
EUNL

Netherlands

The AP punches above its weight โ€” swift investigations, landmark cross-border decisions

Autoriteit PersoonsgegevensยทAP

GDPRAVGNIS2DORATelecommunicatiewet
Dutch Windmill
4/5
Enforcement
2โ€“4%
Penalty basis
18 mo
Avg investigation
89
Cases tracked
โ‚ฌ5.1M
Total fines

Enforcement profile

The AP conducts targeted sector investigations and responds to complaints. It prioritises systemic violations over isolated incidents. Investigations typically result in a formal warning before a fine is issued, except in cases of intentional non-compliance or prior warnings ignored.

AP focuses heavily on healthcare data, financial sector, and government bodies
Dutch data subjects file approximately 10,000 complaints per year
First EU DPA to issue a fine under the AVG (Dutch implementation of GDPR)

Notable enforcement decisions

Booking.comGDPR Art. 332021

Late notification of a data breach involving personal data of 540,000 hotel guests.

โ‚ฌ475K
TikTokGDPR Art. 132021

Inadequate privacy information provided to child users of the platform.

โ‚ฌ750K
DPG MediaGDPR Art. 62022

Unlawful processing of personal data for personalised advertising without valid consent.

โ‚ฌ525K

Active regulations

GDPR
AVG
NIS2
DORA
Telecommunicatiewet
Dutch Windmill

The iconic polder windmill, preserved at Zaanse Schans, is the universal symbol of Dutch landscape engineering and water management heritage.

Enforcement data is based on publicly available decisions and may not reflect every action, appeal, reduction, or subsequent court ruling. Fine amounts are shown as reported at the time of the decision. This information is for intelligence purposes and does not constitute legal advice.