Autoriteit Persoonsgegevens
Profile
Organisation tracking is available to eligible accounts.
Profile narrative
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) is the national supervisory authority responsible for monitoring compliance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG). It handles complaints from individuals about possible violations of their privacy rights. It conducts investigations into alleged breaches. It can issue warnings, orders to cease processing, and administrative fines. The AP also provides guidance and recommendations to organisations, public bodies, and legislators on data protection matters. It participates in the European Data Protection Board to ensure consistent application of GDPR across the EU. Its remit covers all entities that process personal data within the Netherlands. This includes multinational corporations, small enterprises, healthcare providers, educational institutions, and government agencies.
The AP operates as an independent administrative authority, meaning it is not subordinate to any government ministry but is accountable to the Dutch parliament for its performance and budget. Its headquarters are situated in the Netherlands, and it carries out its supervisory functions nationwide without a prescribed limit on the size or sector of the organisations it oversees. Notable attributes include its power to impose fines that can reach up to twenty million euros or four percent of global annual turnover, whichever is higher, under GDPR provisions. It also advises legislative initiatives that affect privacy and data protection. The authority’s involvement in the 2026 incident involving Ivanti Endpoint Manager Mobile highlighted its exposure to the same supply‑chain risks faced by other European institutions. This reinforces the importance of its own cybersecurity resilience. As a public body, the AP has no parent company or subsidiaries. It exists as a standalone statutory entity tasked with safeguarding personal data in the Dutch digital economy.
Incidents
1 incident linked to this organisation.