Netherlands. ePrivacy / marketing. Act
TelecommunicatiewetTelecommunications Act (Telecommunicatiewet), Art 11.7a (cookies) and Art 11.7 (unsolicited communications)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
The Dutch Telecommunications Act requires consent for non-essential cookies and opt-in for e-mail and SMS marketing to individuals. Tracking cookies are presumed to involve personal data.
- Key themes
- Unique features
Exemption for analytics cookies with little privacy impact; split enforcement between ACM and AP.
- SaaS relevance
Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- ACM up to €900,000 or 10% turnover; GDPR fines via AP
§3Dates
- Key dates
- Adopted
- In force
- Cookie rule Art 11.7a amended 2012 and 2015 (analytics exemption)
§4Text and authority
- Text
- Authoritative text wetten.overheid.nl
- Authority
- Autoriteit Consument & Markt (ACM) for Art 11.7/11.7a; Autoriteit Persoonsgegevens for personal data in tracking cookies
§5Where it applies
- Domestic law of
- Netherlands
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.