Netherlands

Lawsuit against X over disclosure of user data and access rights in automated moderation decisions (No. 200.346.613/01)

On 14 April 2026, the Amsterdam Court of Appeal ordered X to provide a user with extensive access to their personal data under the General Data Protection Regulation, following an appeal concerning a temporary, automated account restriction that reduced the user’s visibility. The judgment clarifies the obligations of social media platforms and other platform intermediaries that process personal data and deploy automated decision-making systems. The Court held that internal system records, inc...

Amsterdam Court of Appeal ordered X to disclose user data and clarified access rights in automated moderation decisions

The Amsterdam Court of Appeal ordered X to provide a user with extensive access to their personal data under the GDPR, clarifying that internal system records including moderation labels and security logs constitute personal data.

Authority for Financial Markets' inquiry into use of Artificial Intelligence in capital markets

On 13 April 2026, the Authority for the Financial Markets (AFM) adopted a report on the use of Artificial Intelligence (AI) in capital markets, examining how AI is reshaping capital markets across the pre-trade, execution, and post-trade lifecycle. The report focuses on all capital market participants, including investment firms and supervisory authorities. It identifies a range of risks and recommended obligations, including standardised disclosures for generative AI tools used as substitute...

Lawsuit alleging generation and distribution of non-consensual undressing images and child pornographic material (Stichting Offlimits v X.AI, X Corp, and X Internet Unlimited Company)

On 26 March 2026, the Amsterdam District Court issued a preliminary relief ruling in Stichting Offlimits v X.AI LLC, X Corp., and X Internet Unlimited Company (C/13/783613 / KG ZA 26-120), prohibiting X.AI from generating and distributing non-consensual undressing images and child pornographic material via the Grok AI chatbot. The court prohibited X.AI from generating and distributing non-consensual undressing images of persons residing in the Netherlands, and from producing and distributing ...

Dutch AP warns autonomous AI agents expose users to cyber dangers

The Autoriteit Persoonsgegevens (AP), the Dutch data protection authority, warns users and organisations against the use of OpenClaw and similar experimental systems. The reason for this warning is the rapid pace at which OpenClaw has gained popularity. This type of open-source systems typically do not meet basic security requirements. The use of such systems poses major risks of data breaches and account takeovers.

Dutch AP presents vision for values-based generative AI

The Autoriteit Persoonsgegevens (AP), the Dutch data protection authority, presents its vision on generative artificial intelligence (AI) today. The supervisory authority outlines how generative AI can be used safely, responsibly and in line with fundamental rights. Looking ahead, the AP sees opportunities, but at the same time warns for real societal risks.

Authority for Consumers and Markets investigation into Roblox over alleged risks to minors under Digital Services Act

On 30 January 2026, the Netherlands Authority for Consumers and Markets (ACM) opened an investigation into the online game platform Roblox concerning possible risks faced by minors in the European Union. The investigation will examine whether Roblox has taken sufficient measures to protect minors, including measures addressing exposure to violent or explicit content, contact by bad actors, and the use of misleading techniques to stimulate purchases. The investigation follows a preliminary inq...

US introduces Pax Silicia Initiative (with coalition of other countries)

Pax Silica is a U.S.-led strategic initiative to build a secure, prosperous, and innovation driven silicon supply chain—from critical minerals and energy inputs to advanced manufacturing, semiconductors, AI infrastructure, and logistics. Rooted in deep cooperation with trusted partners, Pax Silica aims to reduce coercive dependencies, protect the materials and capabilities foundational to artificial intelligence, and […]

Authority for Consumers and Markets' Focus on Digital Economy 2025 strategy outlining enforcement priorities

On 12 May 2025, the Netherlands Authority for Consumers and Markets (ACM) released its Focus on Digital Economy 2025 strategy, outlining enforcement priorities across the EU digital regulatory landscape. The strategy applies to dominant online platforms, cloud service providers, application developers, e-commerce operators, and data intermediaries. It focuses on fair market access, consumer protection, reliable data sharing, and coordinated oversight. Key measures include monitoring complianc...

Guidelines on targeting and delivery of political online advertising

On 21 November 2025, the Dutch Data Protection Authority (AP) closes the public consultation, which had been open since 9 October 2025, on the guidelines on targeting and delivery of political online advertising. The consultation concerns AP’s guidance clarifying the rules on targeting and delivery of political online advertising under the Regulation on Transparency and Targeted Political Advertising (VPR). The VPR entered into force on 10 October 2025. The guidance explains requirements for ...

Dutch DPA flags risks in EU proposals on AI and data rules

De Autoriteit Persoonsgegevens (AP) heeft kennisgenomen van het officiële Omnibusvoorstel van de Europese Commissie. De Commissie zegt hiermee verschillende wetten, waaronder de Algemene verordening gegevensbescherming (AVG) en de AI-verordening, te willen aanpassen om digitale regelgeving te vereenvoudigen. Dat streven is te begrijpen, zolang het de rechten van mensen niet aantast.

ECLI:NL:RBNNE:2025:4814

Lawyer used ChatGPT in proceedings before the Rechtbank Noord-Nederland. Fabricated: Case Law | Pleitnota verwees naar een door de advocaat/geëxposeerde Hoge Raad-arrest aangeduid als 'HR 19 december 2003' en ECLI:NL:HR:2003:AL8444 (NJ 2004/75); rechtbank constateert datumverschil (5-12-2003), ECLI niet terugvindbaar en voorgestelde rechtsregel ontbreekt. Outcome: ..

ECLI:NL:RBNNE:2025:4814

Fabricated: Case Law | Pleitnota verwees naar een door de advocaat/geëxposeerde Hoge Raad-arrest aangeduid als 'HR 19 december 2003' en ECLI:NL:HR:2003:AL8444 (NJ 2004/75); rechtbank constateert datumverschil (5-12-2003), ECLI niet terugvindbaar en voorgestelde rechtsregel ontbreekt. || Misrepresented: Case Law | Pleitnota noemde 'NJ 1996/273' aangeduid als arrest van 22 december 1995; rechtbank merkt op dat het gaat om een Arubaanse zaak van 8 december 1995, niet relevant voor verdelingskwesties en onjuist gepresenteerd. || Fabricated: Other | Rechtbank vermoedt dat meerdere vindplaatsen via ChatGPT of vergelijkbare zoekmachine zijn opgedoken en zonder controle in de processtukken zijn overgenomen.

ECLI:NL:RBNNE:2025:4814

ECLI:NL:RBGEL:2025:9423

Lawyer appeared before the Gelderland. Fabricated: Case Law | Plaintiff's counsel cited several CRvB rulings with ECLI numbers that the court could not locate; some cited statements appear not to exist and were therefore rejected. Outcome: Court found several cited rulings non-existent or irrelevant, rejected reliance on that case law, and dismissed the appeal..

ECLI:NL:RBGEL:2025:9423

Fabricated: Case Law | Plaintiff's counsel cited several CRvB rulings with ECLI numbers that the court could not locate; some cited statements appear not to exist and were therefore rejected. || Misrepresented: Case Law | ECLI numbers that the court located corresponded to topics irrelevant to the Participation Act argument; the cited case law was misrepresented and not relevant.

ECLI:NL:RBGEL:2025:9423

Data Protection Authority inquiry into AI chatbots as voting assistants

On 21 October 2025, the Netherlands Data Protection Authority (DPA) issued a report examining the risks of using AI chatbots as voting aids for elections. The DPA found that chatbots provide strongly biased and polarised political advice, misrepresenting the Dutch fifteen-party system. In an experiment testing four chatbots with fictional voter profiles based on Kieskompas and StemWijzer data, two parties, GroenLinks-PvdA and PVV, dominated first-place recommendations, while parties such as C...

Data Protection Authority issues a report examining risks of using AI chatbots as voting aids for elections

Steeds meer kiezers gebruiken AI-chatbots om te bepalen op welke partij zij gaan stemmen bij de Tweede Kamerverkiezingen van 29 oktober. Maar deze adviezen zijn onbetrouwbaar en duidelijk gekleurd. Dat blijkt uit onderzoek van de Autoriteit Persoonsgegevens (AP).

Data Protection Authority investigation into Experian over alleged General Data Protection Regulation infringements

On 16 October 2025, the Dutch Data Protection Authority (AP) issued its decision maintaining the EUR 2.7 million fine imposed on Experian imposed 6 December 2023. In addition to the fine, the original decision issued two orders on Experian for infringements of Article 5(1)(a) in conjunction with Article 6(1) and Article 12(1) in conjunction with Article 14(1) and (2) of the General Data Protection Regulation (GDPR). These infringements related to Experian's failure to adequately inform data s...

Dutch AP and ACM warns companies from overusing AI, citing ‘one of the biggest annoyances’ people are facing

Organisaties die in hun dienstverlening chatbots gebruiken, moeten mensen altijd de mogelijkheid bieden om met een medewerker te spreken. Ook moeten organisaties duidelijk maken wanneer je met een chatbot te maken hebt en erop toezien dat de chatbot geen onjuiste, ontwijkende of misleidende informatie geeft.

Data protection authorities adopted joint statement on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI

Primary source (pcpd.org.hk) dated 17 September 2025 in NL. See linked source for full text.

Netherlands Authority for Consumers and Markets investigation into Snapchat over alleged violations of the Digital Services Act concerning illegal vape trade to minors

On 9 September 2025, the Netherlands Authority for Consumers and Markets (ACM) opened an investigation into the online platform Snapchat in connection with the illegal trade of vapourisers to minors, following an enforcement request submitted at the end of August by the Youth Smoking Prevention Foundation. The investigation focuses on whether Snapchat complies with the requirements of the Digital Services Act (DSA), in particular its obligations to take appropriate and proportionate measures ...

The Boys of Rockanje v. Dwaard

Lawyer appeared before the Rotterdam D.. Fabricated: Case Law | The court noted that the party cited fabricated ECLI numbers

Dutch Data Protection Authority's whitepaper on meaningful human intervention in automated decision making

On 23 July 2025, the Dutch Data Protection Authority published guidance on implementing meaningful human intervention in automated decision-making systems under Article 22 of the General Data Protection Regulation. The guidance applies to data controllers across all sectors who deploy algorithms for individual decision-making that produce legal effects or significantly affect data subjects. The Authority establishes a four-pillar framework requiring human assessors to consider all relevant fa...

Data Protection authority inquiry into artificial intelligence and algorithms with a focus on emotion recognition systems

On 15 July 2025, the Dutch Data Protection Authority (AP) published its fifth edition report on Artificial Intelligence (AI and algorithms, highlighting the growing use yet contested effectiveness of AI emotion recognition systems across sectors, including customer service, healthcare, and wearables. The report warns these systems risk infringing fundamental rights, including privacy and autonomy and stresses organisations must critically assess, transparently deploy, and secure consent when ...

Dutch DPA publishes report on AI emotion recognition systems

De Rapportage AI & Algoritmes Nederland (RAN) gaat in op trends, risico’s en beheersing van de inzet van artificiële intelligentie (AI) en algoritmes. In deze vijfde editie gaan we in op overkoepelende ontwikkelingen, grondrechten en publieke waarden, beleid en regelgeving. Ook hebben we aandacht voor het belang van algoritmeregistratie.

Dutch Government unveils $82m AI Hub Plan in Groningen

The government is to contribute €70 million towards building a major artificial intelligence hub in Groningen, joining forces with regional authorities that have already pledged €60 million. If the European Commission agrees to invest a further €70 million later this year, construction on the so-called “AI Factory” could begin in 2026, caretaker economic affairs minister Vincent Karremans told MPs in a briefing. The project, he said, is crucial for the Netherlands’ technological independence. “AI will fundamentally change our economy and...

Data Protection Authority inquiry on societal use of emotion Artificial Intelligence

On 6 May 2025, the Dutch Data Protection Authority closes a public consultation on the societal use of emotion Artificial Intelligence (AI) to inform its upcoming AI and Algorithm Risks Report. The consultation applies to emotion recognition technologies, including those embedded in consumer devices or used during customer service interactions. Such technologies interpret emotional states using biometric data including facial expressions or heart rate. The consultation aims to seek inputs to ...

Dutch DPA launches consultation on emotion AI

In de komende Rapportage AI- & Algoritmerisico’s Nederland (RAN) doet de Autoriteit Persoonsgegevens (AP) een verkenning naar de inzet van emotie-AI in de samenleving. Met de RAN geven we inzicht in trends en ontwikkelingen van de inzet van algoritmes en AI in Nederland.

Parliamentary motion on measures to safeguard sovereignty, service continuity, and data protection in public sector cloud contracts (No. 26643-1321)

On 18 March 2025, a parliamentary motion on measures to safeguard sovereignty, service continuity, and data protection in public sector cloud contracts was adopted by the House of Representatives. The motion requests that the government take additional steps in response to the use of cloud service providers located outside the European Economic Area. The motion refers to providers that process government and personal data on behalf of Dutch public authorities. The motion further calls for coo...

Parliamentary motion on national control of DNS infrastructure of .nl internet domain (No. 26643-1317)

On 18 March 2025, a parliamentary motion on national control of the entire DNS infrastructure of the .nl internet domain was adopted by the Dutch House of Representatives. The motion requests the government to initiate consultations with the Netherlands Internet Domain Registration Foundation (SIDN) and domestic cloud service providers to relocate the portion of the DNS chain currently scheduled for migration to Amazon Web Services back to the Netherlands. The motion further requests that the...

DPA opens consultation on tools for meaningful human intervention in algorithmic decision-making

De AP ontwikkelt handvatten voor betekenisvolle menselijke tussenkomst bij algoritmische besluitvorming. Om deze handvatten goed aan te laten sluiten bij de praktijk vraagt de AP organisaties, experts en belanghebbenden via deze consultatie om input.

Data Protection Authority guidance prohibiting artificial intelligence systems for risk assessment of criminal offences

On 3 April 2025, the Dutch Data Protection Authority closes the public consultation on guidance prohibiting artificial intelligence (AI) systems for risk assessment of criminal offences. The consultation applied to the prohibition of AI systems for risk assessments of criminal offences under the European AI Regulation (2024/1689). The regulation bans AI systems that assess an individual’s likelihood of committing a criminal offence solely based on profiling or personality traits while allowin...

Dutch Data Protection Authority investigation into DeepSeek's cross-border data transfers compliance with General Data Protection Regulation

On 3 February 2025, the Dutch Data Protection Authority (AP) announced an investigation into DeepSeek's data transfer compliance with the General Data Protection Regulation. The investigation will examine whether DeepSeek is in compliance with the privacy conditions required for transferring personal data from European citizens to countries outside the European Union. Concerns have been raised about the storage of personal data, including that of Dutch users, on servers in China. The AP is ex...

Dutch DPA launches consultation on prohibited AI systems used for criminal risk assessment

De Autoriteit Persoonsgegevens (AP) vraagt input over verbod D uit de AI-verordening: AI-systemen voor risicobeoordelingen strafbare feiten.

Institute for Human Rights investigation into Meta for alleged gender-based discrimination on jobs ads

On 18 February 2025, the Netherlands Institute for Human Rights issued a ruling in response to a petition filed by Global Witness and Bureau Clara Wichmann against Meta Platforms (formerly Facebook). The Institute found that Meta had engaged in prohibited indirect gender-based discrimination in the display of job advertisements on Facebook in the Netherlands. The ruling, based on Dutch equal treatment legislation and EU non-discrimination principles, determined that Meta Ireland, as a service...

Lawsuit concerning alleged violation of Digital Services Act (Bits of Freedom Foundation v Meta Ireland)

On 2 October 2025, the Amsterdam District Court ruled that Meta Ireland, the operator of Facebook and Instagram in Europe, violated the Digital Services Act (DSA). The court found that Meta's practice of automatically reverting to a profiling-based recommendation system, even after a user selected a non-profiling alternative, constitutes an illegal "dark pattern." The automatic switchback, which occurs when users navigate the app or close and reopen it, disrupts user autonomy and causes "choi...

Dutch Data Protection Authority and Netherlands Authority for Consumers and Markets joint statement on obligations for chatbot use in customer service

On 2 October 2025, the Dutch Data Protection Authority (AP) and the Netherlands Authority for Consumers and Markets (ACM) issued a joint statement requiring organisations that use chatbots in customer service to ensure that individuals are always able to communicate with a human representative. Organisations are required to clearly disclose when a chatbot is being used, and to guarantee that the chatbot does not provide incorrect, evasive, or misleading information. The regulators emphasised ...

DeepSeek banned from civil servants' computers

Digitalisation minister Zsolt Szabó has banned Dutch civil servants from using the Chinese AI app DeepSeek over fears that sensitive information could end up on Chinese servers. The app, which answers questions based on information the user provides, is “open to spying,” Szabó told the AD earlier this week. The ban comes in the wake of a warning from privacy watchdog Autoriteit Persoonsgegevens (AP) which called on people to be very careful when using the app. “People would do well...