The Dutch Data Protection Authority (AP) has published its policy on the implementation of the law, which details the use of its supervisory and sanctioning tools in cases of non-compliance with privacy protection rules.

This policy describes the guiding principles of the AP during the supervisory phase, the procedure process, and cooperation with other supervisory authorities. Its publication aims to clarify the process for organizations. The final document follows a public consultation launched on April 13, 2026, on a preliminary version, which received 12 contributions. According to the authority, this feedback helped produce a more understandable and fairer policy, and their handling is detailed in a summary document.