Netherlands. Comprehensive data protection. Act
WbpWet bescherming persoonsgegevens (Personal Data Protection Act 2000)
§1Summary
- Synopsis
The Dutch implementation of Directive 95/46/EC. It replaced the Wet persoonsregistraties and regulated the processing of personal data generally, with an enforcement role for the College bescherming persoonsgegevens, which could impose fines and orders in certain cases. It lapsed on 25 May 2018, replaced by the GDPR and the UAVG, which is to a large extent identical in content.
- Key themes
- Unique features
Shifted scope from registrations to any processing of personal data.
- SaaS relevance
Historical only; replaced by the GDPR and the UAVG (see nl-uavg).
§2Obligations
- Breach notification
- None
- DPO
- No
§3Dates
- Key dates
- Adopted
- In force
- Ended
- Act of 6 July 2000; in force 1 September 2001 with a one-year transition; lapsed 25 May 2018 when the UAVG took effect
§4Text and authority
- Text
- Authoritative text wetten.overheid.nl
- Authority
- College bescherming persoonsgegevens (CBP, later Autoriteit Persoonsgegevens)
§5Where it applies
- Domestic law of
- Netherlands
§6Sources and verification
- Sources consulted
- Verification
High confidence.
Entry into force of 1 September 2001 is from secondary Dutch sources (compact.nl and the UvA repository), not from the wetten.overheid.nl page, which showed the lapse date and the act date only.