Nederland · Uitvoeringswet AVG (UAVG)
TL;DR
Websites targeting users in Netherlands must comply with GDPR as implemented locally through the Uitvoeringswet AVG (UAVG). The supervisory authority is the Autoriteit Persoonsgegevens (AP). Notable enforcement: Uber fined for data transfers to US (€10 million). Use our free scanner below to check your website instantly.
Free audit — 25+ automated checks in 60 seconds
Scan My Website Free →Authority
Autoriteit Persoonsgegevens (AP)
Local Law
Uitvoeringswet AVG (UAVG)
Language
Dutch
Largest Fine
€10 million
Population
17.8 million
Cookie consent must be freely given — no cookie walls
BSN (social security number) processing heavily restricted
Healthcare data requires extra safeguards
DPO required for organizations processing sensitive data at scale
Mandatory data breach notification within 72 hours
Consent withdrawal must be as easy as giving consent
The Autoriteit Persoonsgegevens has been particularly strict on cross-border data transfers and Google Analytics usage. They issued guidance in 2022 warning that standard Google Analytics configurations violate GDPR.
Cookie consent banner that requires opt-in before non-essential cookies
Privacy policy available in Dutch
Clear identification of data controller and contact details
Data Processing Agreement (DPA) with all third-party processors
Lawful basis documented for each processing activity
Data Subject Access Request (DSAR) process in place
Data breach notification procedure compliant with 72-hour rule
Data Protection Impact Assessment for high-risk processing
International data transfer mechanisms documented (SCCs, adequacy decisions)
Records of processing activities (ROPA) maintained
In Netherlands, websites must comply with GDPR as implemented by the Uitvoeringswet AVG (UAVG). Key requirements include obtaining explicit consent before setting non-essential cookies, providing a clear privacy policy, appointing a DPO when required, and notifying data breaches within 72 hours to the Autoriteit Persoonsgegevens (AP).
The Autoriteit Persoonsgegevens (AP) is the supervisory authority responsible for enforcing data protection laws in Netherlands. They can investigate complaints, conduct audits, and issue fines up to €20 million or 4% of annual global turnover.
Use PrivacyChecker's free scanner to perform an instant audit of your website. Our tool checks 25+ compliance points including cookie consent, privacy policy presence, security headers, tracker detection, and more — all relevant to Netherlands's GDPR requirements.
Find out in 60 seconds with our free GDPR scanner
Run Free Audit →