News

14 December 2015

Data breaches: how to be prepared

On 1 January 2016, a change to the Dutch Data Protection Act will come into force that requires organisations to notify the Dutch data protection authority (DPA) of any data breaches. In many cases, individuals whose data are involved will also have to be informed. Failure to notify may result in penalties from the Dutch […]

7 December 2015

Penalty powers of DPA: what to expect?

Over the past few years, we have observed privacy compliance becoming a boardroom issue in the Netherlands. Enforcement – albeit without serious penalties – was a significant risk and reputational damage could be high. But the legal stakes will be even higher next year when the Dutch Data Protection Authority (DPA) will be able to […]

6 October 2015

Safe Harbour is invalid, what are the next steps?

Organisations can no longer rely on the Safe Harbour framework for transfers of personal data from the EU to the US. This is the outcome of a seminal decision by the highest court in Europe. Does this now mean all Safe Harbour-based transfers should immediately be suspended?

16 March 2015

New exception for analytic cookies

A more flexible cookie legislation came into effect last week. As a result of the amended Dutch Telecommunications Act, prior consent from website visitors is no longer required for analytic cookies.