How to submit a GDPR data access request in Netherlands

A GDPR data access request (inzageverzoek) is submitted in writing to the organisation processing your personal data in the Netherlands. They have one month to respond and must provide free access to what data they have about you. This right is important for maintaining control over your privacy under Dutch law and checking whether organisations handle your personal information correctly.

Let MijnRecht.AI analyse your situation for free

Analyse my situation

The short answer

You send a letter, email or use an online form to submit your data access request to the organisation in the Netherlands. Clearly state that you're invoking Article 15 of the GDPR (right of access) and identify yourself properly. The organisation must respond within one month and provide free information about what personal data they have about you. If they don't respond or refuse, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

What does Dutch law say?

Article 15 of the General Data Protection Regulation (GDPR) gives you the right to know what personal data an organisation processes about you. This is called the 'right of access'. Under Dutch law, organisations are obliged to respond within one month and may not charge for this, unless your request is clearly unfounded or excessive. They must also tell you what they use your data for, how long they keep it and with whom they share it.

1Article 15 GDPR: right of access to personal data

2Article 12 GDPR: organisations must respond within 1 month

3Article 12 GDPR: data access requests are free, except in cases of abuse

What should you watch out for?

Ensure you can clearly identify yourself in your request, otherwise the organisation may ask for additional proof of your identity. Be specific about what you want to know - for example, ask for all data they have about you and what they use it for. Pay attention to the one-month response period and keep track of when you sent the request.

1Identify yourself clearly with name and contact details

2Explicitly state that you're invoking Article 15 GDPR

3Ask for an overview of all personal data they have about you

4Keep a copy of your request and note the date sent

Practical example in the Netherlands

Suppose you want to know what data an online shop has stored about you. You send an email to their customer service with your name, email address and order number from a recent purchase. You write that based on Article 15 GDPR you want access to all your personal data. Within a month you receive an overview with your account details, order history, payment details and any marketing preferences. If they don't respond, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

What can you do?

Follow these steps to successfully submit a data access request in the Netherlands:

1Send a written request (letter, email or online form) to the organisation

2State that you're invoking Article 15 GDPR and identify yourself clearly

3Wait maximum one month for a response, otherwise file a complaint with the Dutch Data Protection Authority

Conclusion

Submitting a GDPR data access request in the Netherlands is simple: send a written request to the organisation and refer to Article 15 of the GDPR. They must respond within one month free of charge with an overview of your personal data.

Frequently Asked Questions

What if an organisation doesn't respond to my data access request in the Netherlands?

Can an organisation charge money for a data access request?

What information must an organisation give me with a data access request?

Can I also submit a data access request orally?

How can I prove that I sent the data access request?

What happens if an organisation wants to verify my identity?

Free analysis

Have a legal question?

Let AI analyse your situation and discover your rights and options instantly.