Cybersecurity Policy Report, Practical Templates Released by Dutch Privacy Agency, (Sep 8, 2026)

By Tony Foley

Two new templates issued by the Dutch data protection authority, Autoriteit Persoonsgegevens (AP), are aimed at small and medium enterprises and are designed to make it easier for entrepreneurs to comply with privacy rules, including the European Union’s General Data Protection Regulation (GDPR).

In a news release explaining the templates, the AP said entrepreneurs had indicated that they faced GDPR compliance hurdles and had asked for ready-to-use templates, particularly to use as a basis for their data processing registers and privacy statements. The AP worked with the Ministry of Economic Affairs and Climate Policy and MKB-Nederland to develop the templates.

AP explained that processing registers tracked the personal information processed by a company and were helpful in the event of a data breach, identifying all data at issue and allowing companies to act more quickly to prevent further damage. Privacy statements, on the other hand, are used to inform customers about the use of their personal data. Good privacy statements build trust with customers, assuring them that their data is safe.

The template forms may be downloaded from the news release but are available only in Dutch.

News: InternationalLegislation DataPrivacy GDPR