The Dutch government has sent the GDPR Implementation Bill to the Parliament. The main theme of the bill is that the GDPR is implemented in a “policy-neutral manner, meaning that the bill continues all current law, insofar as is allowed under the GDPR. The bill also re-establishes the Dutch Data Protection Authority (DPA) and governs its organization and additional powers. It also notes that the DPA will also be allowed to enforce the GDPR and the Implementation Act. One important part of the bill is several exceptions for the processing of special data in The Netherlands. While the current Data Protection Act contains specific exceptions per type of special data to be processed by a specific category of controllers or limit the processing of such data to specific purposes, all such exceptions are maintained in this bill.
