Data Protection Monitor
Global Privacy & Data Protection Intelligence

Netherlands (NL) · Module Detail

Netherlands: Sectoral Watch

← Full Netherlands overview Build report with Netherlands Request deeper dive

#

Telecoms/ePrivacy and employment overlays are well documented; credit-scoring and education sub-modules lack NL-specific findings.

Primary frameworkTelecommunicatiewet (transposing ePrivacy Directive 2002/58/EC); UAVG Chapter 3; Works Councils Act (WOR)
Supervisory authorityAutoriteit Persoonsgegevens (AP)
Traffic-light rationale — AmberTelecoms/ePrivacy and employment overlays are well documented; credit-scoring and education sub-modules lack NL-specific findings.

Sub-modules (7)

Financial Sector OverlayAmber

No NL-specific financial-sector DP overlay beyond general GDPR/UAVG was surfaced in this run; AFM/DNB prudential rules interact with but do not supplant AP jurisdiction over personal data.

Absence provenance: unavailable. Searched: Netherlands financial sector data protection overlay AFM DNB GDPR.

Health Sector OverlayGreen

UAVG Chapter 3 grants hospitals and other health controllers specific exceptions to process special-category health data for defined purposes.

Claims (1):

  • UAVG Chapter 3 provides sector-specific exceptions allowing hospitals, schools, and insurance companies to process special categories of personal data for defined purposes such as identification, sick-leave management, benefits/pensions, and pre-employment screening.

Telecoms And EprivacyGreen

The Telecommunicatiewet transposes the ePrivacy Directive, including cookie-consent and confidentiality-of-communications rules.

Claims (1):

  • The Telecommunications Act (Telecommunicatiewet) is the primary legislation governing telecommunications in the Netherlands and includes a chapter on privacy transposing the ePrivacy Directive (2002/58/EC as amended).

Employment DataAmber

Dutch Works Councils hold a statutory co-determination/consent right over the introduction of personnel-tracking and monitoring systems, and the AP publishes guidance to support Works Councils in assessing GDPR-compliance of such systems.

Claims (1):

  • The AP published a Works Council privacy booklet covering the right of consent and assessment questions for personnel-tracking systems, supporting Works Councils in evaluating whether employer monitoring plans are GDPR-compliant.

Credit And ScoringRed

No NL-specific credit-scoring overlay was identified in this run beyond general GDPR Article 22 automated-decision-making protections.

Absence provenance: unavailable. Searched: Netherlands credit scoring data protection BKR GDPR.

EducationRed

No NL-specific education-sector DP statute distinct from UAVG general exceptions was identified.

Absence provenance: unavailable. Searched: Netherlands education sector data protection overlay UAVG.

InsuranceGreen

UAVG Chapter 3 grants insurance companies specific exceptions to process special-category data for underwriting and claims purposes.

Claims (1):

  • UAVG Chapter 3 provides sector-specific exceptions allowing hospitals, schools, and insurance companies to process special categories of personal data for defined purposes such as identification, sick-leave management, benefits/pensions, and pre-employment screening.
Category narrative69 words

Telecommunications and electronic-communications processing is governed by the Telecommunicatiewet, transposing the ePrivacy Directive, including the cookie-consent rule and a July 2021 shift to opt-in consent for telemarketing to natural persons (abolishing the do-not-call register). Employment-sector processing is subject to Works Council co-determination rights over personnel-monitoring/tracking systems. Health and insurance sectors benefit from UAVG special-category exceptions. No NL-specific credit-scoring or education-sector DP overlay was identified beyond the general GDPR/UAVG regime.

no periodic updates on record for this sub-brief

Sources and claims (3)
  1. ConfirmedIAPP — UAVG Chapter 3 provides sector-specific exceptions allowing hospitals, schools, and insurance companies to process special categories of personal data for defined purposes such as identification, sick-leave management, benefits/pensions, and pre-employment screening.observed
  2. ConfirmedDataGuidance — The Telecommunications Act (Telecommunicatiewet) is the primary legislation governing telecommunications in the Netherlands and includes a chapter on privacy transposing the ePrivacy Directive (2002/58/EC as amended).observed
  3. ConfirmedDataGuidance — The AP published a Works Council privacy booklet covering the right of consent and assessment questions for personnel-tracking systems, supporting Works Councils in evaluating whether employer monitoring plans are GDPR-compliant.observed