The Bill on Notification of data leaks was passed by the Dutch Senate on 26 May 2015. The Bill will impose an obligation on data controllers in the Netherlands to notify the Dutch Data Protection Authority and affected individuals in the event of a breach. The law may also require data controllers to update agreements with their data processor to account for breach notice obligations.
Increased fines will also be imposed on both data controllers and data processors for violations of the Dutch Data Protection Act. The fines have been increased up to €810,000 or 10% of the company’s net turnover.
The Bill is expected to enter into force in 1 January 2016.