🇳🇱GDPR Implementation Act

← Back to laws in Netherlands

GDPR Implementation Act

Netherlands applies this national law alongside the GDPR. The summary below concentrates on the national overlay so that the GDPR baseline is not duplicated.

How the national law fits with GDPR

The UAVG implements GDPR opening clauses and establishes the Dutch supervisory framework, national exceptions and safeguards.

National additions and variations

• Where GDPR Article 8 does not apply, Article 5 generally requires a legal representative’s consent for a person under 16 and provides representative exercise of rights in specified incapacity cases.
• Articles 22-30 contain national exceptions and safeguards for special-category data, including health, genetic, biometric, religious and political data.
• Articles 31-33 restrict criminal-data processing to specified grounds and settings.
• Article 43 provides national expression exemptions, while Article 44 permits specified research and statistics restrictions with safeguards.
• A legally prescribed personal identification number may be used only to execute the relevant law or for purposes determined by law.

Operational approach

First maintain the GDPR control set. Then document whether this country is in scope and apply the national controls to the affected people, systems and processing. Keep article-level evidence for child consent, employment, special-category or criminal data, research, electronic communications, identifiers, surveillance and any rights restriction relied upon.