The Autoriteit Persoonsgegevens is the Netherlands' independent data protection authority, enforcing the GDPR as supplemented by the Dutch implementing act (UAVG). It investigates suspected breaches, issues fines and orders, conducts prior consultations where a data protection impact assessment shows high residual risk, and advises on legislative proposals affecting personal data. It has also taken on a coordinating role on algorithmic oversight in the Netherlands.
What the AP publishes
- Decisions and fines, published with reasoning
- Guidance and policy rules, including its published fining policy
- Prior consultation outcomes on high-risk processing
- Algorithm risk reports, a recurring publication surveying algorithmic and AI risk across Dutch sectors
- Advice on draft Dutch legislation
- Annual reports and enforcement statistics
Why it matters for compliance teams
The AP has been ahead of most European authorities in treating algorithmic decision-making as a supervisory topic in its own right, and its algorithm risk reporting is a useful early read on how EU AI Act enforcement is likely to interact with data protection. Its published fining policy also makes penalty exposure in the Netherlands more predictable than in most jurisdictions.
Seqlense DOC indexes AP decisions and guidance in full text alongside EDPB material and the other national authorities, so a privacy team can compare the Dutch position directly against the European baseline.