Legislation on personal data

What legislation applies to personal data?

The GDPR applies to the processing of personal data. In the Netherlands, an exception applies to the processing of personal data by the police or any part of the Ministry for Security and Justice. For these bodies, the Dutch Police Data Act (Wet Politiegegevens) and the Dutch Judicial and Criminal Records Act (Wet Justitiële en Strafvorderlijke gegevens) apply to the processing of personal data.

Besides this general legislation, different sectors also have specific legislation. In healthcare, for example, the Dutch Supplementary Provisions on Processing Personal Data in Healthcare Act (Wet aanvullende bepalingen verwerking persoonsgegevens in de zorg) is also relevant.