Following the National Privacy Benchmark, a recent survey conducted by a consultancy company in collaboration with an independent information society platform (Platform voor de informatieSamenlevingECP), it appeared that 80% of companies and government agencies in the Netherlands are not prepared for the entry into force of the GDPR. 60% is not even sure where personal data of their customers or citizens have been stored. The People's Party for Freedom and Democracy (Volkspartij voor vrijheid en DemocratieVVD) and the Democrats 66 (D66) are of the opinion that the Dutch Data Protection Authority (Autoriteit PersoonsgegevensAP) should initially focus on smaller organizations as it is too big of a hassle for bigger companies to adequately and timely implement the GDPR into their organizations. Judging from the recent investigations by the AP into companies like Uber and Airbnb, we believe that it is fair to say that the AP will not distinguish between small or large companies when carrying out its task as the supervisory authority in the Netherlands.