--- title: "Netherlands — Sectoral Watch | Data Protection Monitor" canonical: https://dataprotection.gi/jurisdictions/netherlands/sectoral-watch/ source_html: /jurisdictions/netherlands/sectoral-watch/index.html description: "Netherlands — Sectoral Watch: sectoral_watch Sectoral Watch 7 sub-modules 3 claims Amber ▾ # Telecoms/ePrivacy and employment overlays are well documented; credit-scoring and education sub-modules lack NL-specific" generated_at: 2026-10-25T04:46:50Z content_sha256: 66fc4073730c142485724aacd35bfe38ddd1797b0596a3ecf5f82293985de6fd generator: "fe-fleet/md-twin@1.0" --- # Netherlands — Sectoral Watch | Data Protection Monitor ### D6Sectoral Watch7 sub-modules3 claimsAmber▾# Telecoms/ePrivacy and employment overlays are well documented; credit-scoring and education sub-modules lack NL-specific findings. Primary framework Telecommunicatiewet (transposing ePrivacy Directive 2002/58/EC); UAVG Chapter 3; Works Councils Act (WOR) Supervisory authority [Autoriteit Persoonsgegevens (AP)](https://autoriteitpersoonsgegevens.nl/) Traffic-light rationale — Amber Telecoms/ePrivacy and employment overlays are well documented; credit-scoring and education sub-modules lack NL-specific findings. #### Sub-modules (7) #### Financial Sector OverlayAmber No NL-specific financial-sector DP overlay beyond general GDPR/UAVG was surfaced in this run; AFM/DNB prudential rules interact with but do not supplant AP jurisdiction over personal data. Absence provenance: unavailable . Searched: Netherlands financial sector data protection overlay AFM DNB GDPR. #### Health Sector OverlayGreen UAVG Chapter 3 grants hospitals and other health controllers specific exceptions to process special-category health data for defined purposes. Claims (1): - UAVG Chapter 3 provides sector-specific exceptions allowing hospitals, schools, and insurance companies to process special categories of personal data for defined purposes such as identification, sick-leave management, benefits/pensions, and pre-employment screening. #### Telecoms And EprivacyGreen The Telecommunicatiewet transposes the ePrivacy Directive, including cookie-consent and confidentiality-of-communications rules. Claims (1): - The Telecommunications Act (Telecommunicatiewet) is the primary legislation governing telecommunications in the Netherlands and includes a chapter on privacy transposing the ePrivacy Directive (2002/58/EC as amended). #### Employment DataAmber Dutch Works Councils hold a statutory co-determination/consent right over the introduction of personnel-tracking and monitoring systems, and the AP publishes guidance to support Works Councils in assessing GDPR-compliance of such systems. Claims (1): - The AP published a Works Council privacy booklet covering the right of consent and assessment questions for personnel-tracking systems, supporting Works Councils in evaluating whether employer monitoring plans are GDPR-compliant. #### Credit And ScoringRed No NL-specific credit-scoring overlay was identified in this run beyond general GDPR Article 22 automated-decision-making protections. Absence provenance: unavailable . Searched: Netherlands credit scoring data protection BKR GDPR. #### EducationRed No NL-specific education-sector DP statute distinct from UAVG general exceptions was identified. Absence provenance: unavailable . Searched: Netherlands education sector data protection overlay UAVG. #### InsuranceGreen UAVG Chapter 3 grants insurance companies specific exceptions to process special-category data for underwriting and claims purposes. Claims (1): - UAVG Chapter 3 provides sector-specific exceptions allowing hospitals, schools, and insurance companies to process special categories of personal data for defined purposes such as identification, sick-leave management, benefits/pensions, and pre-employment screening. Category narrative 69 words Telecommunications and electronic-communications processing is governed by the Telecommunicatiewet, transposing the ePrivacy Directive, including the cookie-consent rule and a July 2021 shift to opt-in consent for telemarketing to natural persons (abolishing the do-not-call register). Employment-sector processing is subject to Works Council co-determination rights over personnel-monitoring/tracking systems. Health and insurance sectors benefit from UAVG special-category exceptions. No NL-specific credit-scoring or education-sector DP overlay was identified beyond the general GDPR/UAVG regime. no periodic updates on record for this sub-brief Evidence 3 Sources and claims (3) - Confirmed[IAPP](https://iapp.org/news/a/dutch-government-introduces-gdpr-implementation-bill) — UAVG Chapter 3 provides sector-specific exceptions allowing hospitals, schools, and insurance companies to process special categories of personal data for defined purposes such as identification, sick-leave management, benefits/pensions, and pre-employment screening.observed 2026-08-03 - Confirmed[DataGuidance](https://www.dataguidance.com/sites/default/files/telecommunications-act.pdf) — The Telecommunications Act (Telecommunicatiewet) is the primary legislation governing telecommunications in the Netherlands and includes a chapter on privacy transposing the ePrivacy Directive (2002/58/EC as amended).observed 2026-08-03 - Confirmed[DataGuidance](https://www.dataguidance.com/news/netherlands-ap-publishes-works-councils-privacy-booklet) — The AP published a Works Council privacy booklet covering the right of consent and assessment questions for personnel-tracking systems, supporting Works Councils in evaluating whether employer monitoring plans are GDPR-compliant.observed 2026-08-03