Contact details of the Dutch DPA for DPOs

The Dutch Data Protection Authority (Dutch DPA) is happy to share its thoughts with you about dilemmas that you encounter as a DPO. But as a supervisory authority, it is not our role to assess your advice legally. This is because knowledge of the specific context is necessary and because we do not want to create a precedent.
Do you have a question for the Dutch DPA? Then it is good to know that:

  • We only answer questions from registered DPOs. It is the task of the controller to register you with the Dutch DPA as a DPO.
  • We expect you, as a DPO, to have done the necessary preliminary work before you ask us a question. In your question, refer as much as possible to the specific sections of the law, guidelines or case law that you have looked at. Then we will be able to answer your question more quickly.
  • We hardly ever give an opinion on a specific situation. After all, this requires an assessment of all facts, circumstances and interests. As a DPO, you are best placed to have the necessary insight into the relevant data processing operations, the information systems, and the proportionality of the diverse security measures. That is why we cannot step into your shoes. As a DPO, you see to it that the controller secures the various personal data in an appropriate manner and can account for this towards customers, citizens, and, of course, to the Dutch DPA as supervisory authority.
  • Besides, a concrete answer to a specific case creates a precedent. And we do not want to restrict the room for manoeuvre of organisations and DPOs in applying the GDPR. The standards from the GDPR are ‘open’ for a reason.
     

In conclusion: do you, as a DPO, doubt about how to apply certain rules from the GDPR in your situation? And can you really not work it out? Then you can contact us to spar, but we will not give a response that you can interpret as approval.
We can, for example, share our thoughts with you about possible steps you can recommend to the controller, such as submitting a prior consultation.


Contacting the Dutch DPA
 

The contact between the Dutch DPA and DPOs is important. By sharing questions and cases, we improve the protection of personal data. The Dutch DPA has diverse channels for communication and information sharing with DPOs:

  • This website.
  • Email. There is a special email address for DPOs registered with the Dutch DPA: fg@autoriteitpersoonsgegevens.nl.
  • Telephone. As a DPO, you can ask questions using our DPO telephone line: 070-8888660. You can call us on working days between 9 and 12 am. 
  • The DPO newsletter.
  • Events, such as the Day of the DPO. 

In this way, we support you as a DPO in your important task of overseeing the implementation of and compliance with the privacy policy of your organisation. 
Do you ask us a question by email or telephone? Then we will usually answer your question within 2 weeks. We need that time, for example, tosearch for relevant (European) case law for your case. Are we unable to answer your question within this period? Then we will let you know in time.