{"id":8131,"date":"2026-02-09T16:59:32","date_gmt":"2026-02-09T16:59:32","guid":{"rendered":"https:\/\/eprodat.wpenginepowered.com\/gdpr-avg\/"},"modified":"2026-03-24T15:47:43","modified_gmt":"2026-03-24T15:47:43","slug":"gdpr-avg","status":"publish","type":"page","link":"https:\/\/eprodat.com\/en\/gdpr-avg\/","title":{"rendered":"GDPR \/ AVG"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n \n
\n
\n
\n \n \r\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n
\r\n Services <\/div>\r\n

\r\n \r\n \r\n GDPR \/ AVG\r\n \r\n <\/span>\r\n <\/h1>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n <\/i>\r\n \r\n What is GDPR \/ AVG\r\n \r\n <\/span>\r\n <\/h2>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

On May 25, 2018, the European Union\u2019s GDPR (General Data Protection Regulation) came into force across all member states.<\/p>

In the Netherlands, this means the GDPR takes precedence over the previous national data protection AVG law. Regulation – 2016\/679 – EN – gdpr – EUR-Lex<\/a> <\/p>

The GDPR establishes strict rules to safeguard personal data, that is, any information relating to an identified or identifiable natural person, and defines how organizations must handle, store, and process such data.<\/p>

As a result, this regulation affects not only businesses, but any entity, public authorities, private companies, service providers or third-party processors that handles the personal data of EU residents. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n

\n
\n \n \t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n
\n
<\/div>\n \n
\n
\n
\n \n \t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n <\/i>\r\n \r\n Why the AVG still Matters\r\n \r\n <\/span>\r\n <\/h2>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The national law, AVG, complements the European GDPR and adapts its provisions to the Dutch legal context. Privacy legislation | Autoriteit Persoonsgegevens<\/span><\/a> <\/span><\/p>

Among its aims are: Ensuring transparent data-processing practices, protecting digital rights, and establishing clearer obligations for organizations operating in the Netherlands. <\/p>

The law strengthens citizens\u2019 rights, including rights of access, correction, erasure, portability, and more, while introducing the requirement for a Data Protection Officer (DPO) \/ Functionaris Gegevensbescherming (FG) for certain organizations. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n

\n \n
\n
\n
\n \n
\n \n
\n
\n
\n \n \t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n <\/i>\r\n \r\n What This Means for Your Business \/ Organization\r\n \r\n <\/span>\r\n <\/h2>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n
\r\n
\r\n \"\" <\/div>\r\n \r\n

\r\n Compliance by default: <\/h3>\r\n
Any business processing personal data must ensure lawful, fair, and transparent processing, limit the data collected to what is strictly necessary, keep data accurate and up-to-date, and retain it only as long as needed. <\/div>\r\n <\/div>\r\n
<\/div>\r\n <\/div>\r\n
\r\n
\r\n
\r\n \"\" <\/div>\r\n \r\n

\r\n Rights of data subjects: <\/h3>\r\n
Individuals enjoy enhanced rights such as right to access, correction, erasure (\u201cright to be forgotten\u201d), data portability, restriction or objection to processing, and protection against automated decision-making without consent. <\/div>\r\n <\/a>\r\n <\/div>\r\n
<\/div>\r\n <\/div>\r\n
\r\n
\r\n
\r\n \"\" <\/div>\r\n \r\n

\r\n Obligations for businesses: <\/h3>\r\n
Organizations may need to appoint a DPO \/ FG, maintain records of processing activities, implement security measures, and ensure transparency and consent mechanisms. <\/div>\r\n <\/a>\r\n <\/div>\r\n
<\/div>\r\n <\/div>\r\n
\r\n
\r\n
\r\n \"\" <\/div>\r\n \r\n

\r\n Applicability throughout Europe: <\/h3>\r\n
GDPR \/ AVG applies to any company that processes data of EU residents, even if the company is located outside the EU, if it offers goods or services to EU citizens or monitors their behaviour.<\/div>\r\n <\/a>\r\n <\/div>\r\n
<\/div>\r\n <\/div>\r\n
<\/div>\r\n <\/div>\r\n <\/div>\r\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n
\n \n
\n
\n
\n \n
\n \n
\n
\n
\n \n \t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n <\/i>\r\n \r\n Our Data Protection & Compliance Services\r\n \r\n <\/span>\r\n <\/h2>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe offer tailored services to help you comply with GDPR and AVG requirements: from compliance audits and DPO \/ FG outsourcing to data-handling strategies, internal policies, and ongoing support.\t\t\t\t\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n
\n \n
\n
\n
\n \n \t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n Would you like more information or a quote?<\/span>\r\n Please feel free to contact us<\/span>\r\n <\/div>\r\n
\r\n \r\n Contact <\/a>\r\n <\/div>\r\n <\/div>\r\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n
\n \n
\n
\n
\n \n \t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n \r\n FAQ \r\n \r\n <\/span>\r\n <\/h3>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n \r\n Who must comply with GDPR \/ AVG <\/i>\r\n <\/a>\r\n <\/div>\r\n

Any company, organization, or public authority, national or international, that processes personal data of individuals residing in the EU, regardless of where the company is based.<\/p>
\n<\/div>\r\n <\/div>\r\n

\r\n
\r\n \r\n What rights do individuals have under GDPR \/ AVG <\/i>\r\n <\/a>\r\n <\/div>\r\n

Individuals have rights including access, correction, erasure (\u201cright to be forgotten\u201d), data portability, restriction or objection to processing, and protection from purely automated decisions.<\/p>
\n<\/div>\r\n <\/div>\r\n

\r\n
\r\n \r\n Do I need a Data Protection Officer (DPO \/ FG)? <\/i>\r\n <\/a>\r\n <\/div>\r\n

If your organization handles certain types of data (e.g. sensitive data) or engages in large-scale processing, GDPR \/ AVG may require you to appoint a DPO \/ FG (in-house or external).<\/p>
\n<\/div>\r\n <\/div>\r\n

\r\n
\r\n \r\n How long can personal data be stored? <\/i>\r\n <\/a>\r\n <\/div>\r\n

Only as long as strictly necessary for the purpose it was collected. Unnecessary storage may violate data minimization and storage limitations under GDPR \/ AVG. <\/p>
\n<\/div>\r\n <\/div>\r\n

\r\n
\r\n \r\n What happens if you don\u2019t comply? <\/i>\r\n <\/a>\r\n <\/div>\r\n

Non-compliance can lead to administrative sanctions under AVG and GDPR, including significant fines and reputational damage.<\/p>
\n<\/div>\r\n <\/div>\r\n <\/div>\r\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n

\n
\n
<\/div>\n \n
\n \n
\n
\n
\n \n \t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n \r\n Stay Informed \u2014 Visit Our Blog\r\n \r\n <\/span>\r\n <\/h3>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For regular updates on privacy, compliance, security and data-protection best practices, check our blog<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n <\/div>\r\n <\/span>\r\n \r\n \r\n <\/i> <\/span>\r\n Our Blog <\/span>\r\n <\/a>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n \t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n
\r\n <\/div>\r\n

\r\n \r\n \r\n Our GDPR and Data Protection Services\r\n \r\n <\/span>\r\n <\/h3>\r\n <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tFor the complete, official legal text of GDPR, and to review all obligations defined under the EU regulation, consult the official EU legal repository\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\r\n
\r\n \t
\r\n <\/i>\r\n <\/div>\r\n \t
\r\n\t \t
\r\n\t \t\tAVG | Algemene Verordening Gegevensbescherming - Your Europe \t \t<\/div>\r\n <\/a>\r\n \t <\/div>\r\n <\/div>\r\n
\r\n \t
\r\n <\/i>\r\n <\/div>\r\n \t
\r\n\t \t
\r\n\t \t\tDe AVG in het kort | Autoriteit persoonsgegevens\t \t<\/div>\r\n <\/a>\r\n \t <\/div>\r\n <\/div>\r\n <\/div>\r\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t <\/div>\n <\/div>\n <\/div>\n <\/section>\n \t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Services GDPR \/ AVG What is GDPR \/ AVG On May 25, 2018, the European Union\u2019s GDPR (General Data Protection Regulation) came into force across all member states. In the Netherlands, this means the GDPR takes precedence over the previous national data protection AVG law. Regulation – 2016\/679 – EN – gdpr – EUR-Lex The […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-8131","page","type-page","status-publish","hentry"],"featured_image_src":null,"featured_image_src_square":null,"_links":{"self":[{"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/pages\/8131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/comments?post=8131"}],"version-history":[{"count":0,"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/pages\/8131\/revisions"}],"wp:attachment":[{"href":"https:\/\/eprodat.com\/en\/wp-json\/wp\/v2\/media?parent=8131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}