Privacy update: fines are now made public, plus tips for handling a subject access request
The Dutch DPA must now make fines public Since 1 September 2026, a new rule applies: fines and other sanctions imposed by the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) are made public as standard. That used to be different. Until that date, the AP first had to weigh the interests involved before publishing a […]
The impact of the GDPR on your business: unfair B2B trade practices & legitimate interest
The Court of Justice of the European Union (CJEU) recently issued two GDPR-related rulings that are of great importance to you as a business owner and to your competitors. These rulings address the question of whether breaches of privacy legislation can be classified as unfair trade practices, and whether commercial interest can qualify as a […]
GDPR pitfalls in practice
Privacy is a topic that makes the news every day, often through reports of sensitive data breaches, hacks, or sky-high fines for businesses. For business owners, it is crucial to know how to avoid these risks and pitfalls. In this blog we discuss various current developments regarding the General Data Protection Regulation (“GDPR”). The DPIA […]
Strengthening cyber resilience in SMEs to protect confidential business data and personal data
On 4 June 2024, the Cyber Security Council (CSR) emphasized in an advisory report that the cyber resilience of SMEs needs to be significantly improved. In the report, the CSR explains to the cabinet that SME businesses are often vulnerable to cyberattacks. This is partly because they often have more limited resources for proper security […]
Non-material damage under the GDPR? CJEU provides guidance
On 11 April 2024, the Court of Justice of the European Union (CJEU) clarified how non-material damage under the General Data Protection Regulation (GDPR) must be assessed. What happened here? This ruling concerned a lawyer who discovered that a legal database was using his personal data for direct marketing. This was despite the fact that […]
GDPR compliance in 2024: don’t forget the (pre-)DPIA!
In January of this year, a credit card company was fined €150,000 by the Dutch Data Protection Authority (hereinafter: ‘the AP’). The reason? They used customers’ personal data on a large scale without first carrying out a legally required Data Protection Impact Assessment (hereinafter ‘DPIA’). It is the responsibility of the organization acting as data […]
Is your business digitally resilient under the NIS2 Directive: what’s the latest state of affairs?
We increasingly hear stories about cyberattacks disrupting organizations or institutions. In its annual overview of data breach notifications in the Netherlands, the Dutch Data Protection Authority has issued a clear warning: do not underestimate the risks of cyberattacks. To limit the threat and consequences of cyberattacks as much as possible, the European Union has introduced […]
The era of intrusive tracking cookies is over…
Since 1 January 2024, Google has already started phasing out third-party cookies in its Chrome browser. Browsers such as Microsoft Edge, Safari and Firefox were already ahead of Google, but the most widely used browser, Google Chrome, still lagged behind. This initiative by Google will have a significant impact on the advertising market, as it […]
Are you a website owner? Be aware of the new ‘Google Consent Mode’ legislation taking effect on 1 March 2024!
The protection of privacy rights plays a crucial role in today’s digital society. Privacy legislation also continues to develop. For example, the Digital Markets Act (DMA) enters into force from March 2024*. The DMA designates the major player Google as a gatekeeper, meaning that Google is responsible for obtaining user consent for the collection of […]