The Autoriteit Persoonsgegevens (AP) is the independent Dutch supervisory authority for data protection. It monitors compliance with the AVG, the Uitvoeringswet AVG, and related rules such as the Telecommunicatiewet and Wet politiegegevens. It is the Dutch counterpart of other EU national data protection authorities.
The AP handles complaints from data subjects, investigates reported data breaches, issues guidance, and can impose administrative fines, compliance orders, and processing bans. Employers and staffing agencies must notify the AP within 72 hours of a personal data breach that poses risk to data subjects.
For HR and staffing, the AP publishes practical guidance on recruitment, background checks, employee monitoring, and CV retention. Its enforcement priorities regularly include unlawful screening, over-collection of identity data, and excessive retention of worker records.