# Dutch data protection enforcement and retention disputes

> Live situation record from CLSTR: https://clstr.news/situations/dutch-data-protection-enforcement-and-retention-disputes
> Updated: 2026-09-09T12:08:53.000Z. Sources: 4. Developments: 2.

In September 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) began a new policy of making administrative sanctions and privacy violation fines public by default. This implementation of the Collection Act on Data Protection aims to increase transparency, though information exempt under the Open Government Act remains protected.

Following this shift toward stricter enforcement and transparency, Dutch Justice Minister David van Weel has faced potential fines for continuing the retention of old data intended for cold case investigations. While the Data Protection Authority and the Council of State have argued against storing a “haystack” of data in search of a “needle,” the Minister is seeking a permanent legislative solution. To address the issue, Van Weel is investigating data management practices in four neighboring EU countries and has instructed police to improve data sorting methods.

## Timeline

### 2026-09-09: Dutch Justice Minister risks fines over cold case data retention

Dutch Justice Minister David van Weel is risking fines from the Data Protection Authority by continuing to store old data for cold case investigations while seeking a permanent legal solution.

3 sources. https://clstr.news/cluster/dutch-justice-minister-risks-fines-over-cold-case-data-retention

### 2026-09-03: Dutch Data Protection Authority to publicize privacy fines

From September 2026, the Dutch Data Protection Authority will publicly disclose administrative sanctions and fines for privacy violations, increasing reputational risks for non-compliant entities.

2 sources. https://clstr.news/cluster/dutch-data-protection-authority-to-publicize-privacy-fines

---
Cite as: Dutch data protection enforcement and retention disputes. CLSTR, https://clstr.news/situations/dutch-data-protection-enforcement-and-retention-disputes
