News

Nowadays, it appears that more evidence of criminal offences exists in digital form than in the form of, for example, fingerprints or CCTV footage. Examples include email messages, chat messages, login details, and cloud files. From 18 August 2026, new rules will apply to the sharing of digital evidence with judicial authorities in other EU countries. These rules are intended to make it easier to request and transfer digital evidence for criminal cases within the European Union (EU).

From 2 August 2026, Regulation (EU) 2024/1689 (‘AI Regulation’) will be fully applicable throughout the EU. The AI Regulation is the world’s first source of statutory obligations regarding the development and use of AI systems.

This article explains the statutory obligations that will apply to the deployer of a high-risk AI system.

Developments are following one another at a rapid pace. We would like to provide you with an update as of May 2026.

On February 10, 2026, the Grand Chamber of the EU Court of Justice issued a ruling with potentially far-reaching implications. The EU Court of Justice ruled that the decisions and guidelines of the European Data Protection Board (EDPB) are actionable acts, reviewable by the competent court. The fact that the so-called EDPB Guidelines can be actionable acts makes it possible to challenge the content of these influential guidelines in court.

What is the EU European Health Data Space (EHDS)? The objective of the EHDS is to create a single "space" within the entire EU for electronic exchange of health data.

What does the EU Data Act Regulation mean for exit and continuity arrangements in IT contracts? In this article, we explain what this entails.

On June 28, 2025, the Accessibility Directive / European Accessibility Act (EAA) will enter into force. The aim is to also make it easier for people with, for example, a visual, hearing or other (cognitive) impairment to independently purchase products or services via websites or apps.

The Court of Justice ruled that in this case there was indeed processing of personal data concerning health, even if the order at the online pharmacy was not intended for the person who placed the order. The Court of Justice deviated from the advice of the Advocate General at the Court of Justice in this ruling.

Since January 1, 2024, providing, distributing or otherwise making personal data available with the intention of intimidating someone is a crime under Dutch Criminal Law.

The article you are reading now is Part I in a three-part series on the role of AI within the current state of Dutch law. Part II is about the proposal for a European AI Regulation and Part III is about the legal points of interest when formulating policy on the use of AI within your organization or company.

This article will highlight an underexposed intersection of privacy law with family law, as it will explain how the right to privacy affects Dutch naming law.

On 10 and 11 March 2023, a cyberattack took place on Nebu's servers. The personal data originating from customers of several large companies in the Netherlands were (potentially) released onto the street. The major companies reported the data breach.

The question that arises is what legal boundaries are set within Dutch law for the use of cameras and the collection or distribution of camera images?

The following article outlines what you should legally speaking be aware of when using cameras.

This article broadly outlines the background to the privacy statement and when using a privacy statement may or may not be necessary or useful for a company or organisation.

The Data Transfer Impact Assessment ("DTIA") is a relative newcomer to the field of privacy and data protection law. The emergence of the DTIA is one of the sometimes under-reported consequences of the notorious Schrems II ruling of the Court of Justice of the EU on the transfer of personal data outside the EU.

What is a Data Transfer Impact Assessment ("DTIA") and how do you know when one ought to be conducted?

The judge is of the opinion that the employee, certainly as a MT member, should have known better and should have understood that his comments were taken very serious by the employer.

Shoe retailer Manfield may not require employees to log in to the cash register system through fingerprint scanners. The Amsterdam District Court recently decided that. What are the rules for biometrics in the workplace?

In a recent case before the Court of Justice of the European Union (ECJ), mr. Buivids had made a video recording during his visit to a Latvian police station. He was there to be questioned about a fine that was imposed on him. He subsequently posted this video, on which police officers are recognizable, on Youtube.

Does an employee has the right to inspect his or her entire personnel file?

In the Netherlands it is possible to agree on a zero-hour contract between employer and employee. A zero-hour contract ís an employment contract. In the contract is only not mentioned and therefore not agreed upon when and how often an employee is called for work and actually will work. Instead, the contract states that the obligation to perform the work is postponed until the on-call employee / employee is called by the employer to work.