🇪🇺 Dutch Supervisory Authority for Data Protection (AP)
43 decisions · €135.8M total fines · The Netherlands →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2026-04-01 | Ridetech International B.V. Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 44Art. 46 | €100,000,000 |
| 2026-02-03 | Municipality of Veenendaal Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Ede Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Eindhoven Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Gooise Meren Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Haarlemmermeer Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Huizen Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Tilburg Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Hilversum Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Zoetermeer Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2026-02-03 | Municipality of Delft Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 6Art. 9 | €25,000 |
| 2025-12-15 | Arnhem and Nijmegen University of Applied Sciences Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €175,000 |
| 2025-12-15 | Arnhem and Nijmegen University of Applied Sciences Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €175,000 |
| 2025-10-16 | Experian Nederland B.V. Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6Art. 12Art. 14 | €2,700,000 |
| 2025-10-16 | Experian Nederland B.V. Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6Art. 12Art. 14 | €2,700,000 |
| 2024-12-23 | Coolblue B.V Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6 | €40,000 |
| 2024-11-26 | Netflix International B.V. Insufficient fulfilment of information obligations | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 12Art. 13Art. 15 | €4,750,000 |
| 2024-06-04 | Ambitious People Group B.V. Insufficient fulfilment of data subjects rights | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 12Art. 17 | €6,000 |
| 2024-05-02 | A.S. Watson Health & Beauty Continental Europe B.V. Insufficient legal basis for data processing | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5 | €50,000 |
| 2024-01-15 | International Card Services B.V. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 35 | €150,000 |
| 2023-12-11 | Uber Technologies Inc.
Uber B.V. Insufficient fulfilment of information obligations | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 12Art. 13 | €10,000,000 |
| 2023-11-02 | Voorschoten municipality Non-compliance with general data processing principles | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6Art. 14 | €30,000 |
| 2023-01-19 | Dutch Social Insurance Institution (SVB) Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 32 | €150,000 |
| 2022-04-07 | Dutch Tax and Customs Administration Non-compliance with general data processing principles | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 5Art. 6Art. 32Art. 35 | €3,700,000 |
| 2022-02-24 | Dutch Foreign Ministry Insufficient technical and organisational measures to ensure information security | 🇪🇺 Dutch Supervisory Authority for Data Protection (AP) | Art. 13Art. 32 | €565,000 |
1–25 of 43 next →