The NRFG – Committed to Trust, Quality, and Accountability

General

General

  • What is the purpose of the Dutch Register of Data Protection Officers (NRFG)?

    Protecting personal data is essential.
    However, many organizations still do not fully comply with data protection and privacy legislation. Data Protection Officers (DPOs or FG’s) play an important role in this, but they do not always have sufficient resources or a strong position to effectively monitor compliance.

    That’s why the Dutch Register of Data Protection Officers (NRFG) was established — a national quality register for DPOs. The foundation’s statutes describe this in more detail. Below is a brief summary.

    The foundation’s objectives are:

    • To establish, organize, and maintain a register for Data Protection Officers (DPOs);
    • To register Data Protection Officers in the register;
    • To enforce and promote good professional practice (including expertise and professional competence) of registered DPOs;
    • To maintain and promote the quality of the register’s operation and public trust in it;
    • To supervise validation institutes (including their business operations) and ensure compliance with applicable regulations and obligations arising from agreements made with the foundation.
  • What does the NRFG Foundation do?

    The NRFG provides a framework for quality assurance of Data Protection Officers (DPOs) and clarifies which DPOs demonstrably possess the knowledge, skills, and experience required for the role. In addition to supporting DPOs themselves, NRFG also targets organizations that have appointed or plan to appoint a DPO. A quick check in the register can serve as a solid foundation for future DPO selection procedures.

    With regard to Data Protection Officers, the foundation is responsible for:

    • Registering and managing data;
    • Defining educational requirements and ethical standards;
    • Accrediting training programs;
    • Monitoring compliance with regulations;
    • Maintaining a disciplinary board and enforcing disciplinary measures;
    • Developing and providing information via its website.
  • Who is this register for?

    All Data Protection Officers (DPOs) working in both the public and private sectors can register in the NRFG register.

    In addition, NRFG actively works to raise awareness among clients and employers about the importance of having a Registered DPO.

  • Who manages the register for DPOs?

    The register is managed by the Dutch Register of Data Protection Officers Foundation (NRFG).
    This is an independent foundation with the aim of maintaining and promoting the quality and professionalism of Data Protection Officers (DPOs) in the Netherlands.

  • How can I change my visibility in the register as a DPO?

    If you are registered as a Data Protection Officer (DPO) in the register, you can change your visibility via the website under “My NRFG” and then “My Profile.”

  • Why is 2FA (two-factor authentication) applied when registering?

    Two-factor authentication (2FA) means that, in addition to your password, you need an extra confirmation to log in. It is an extra security step to safeguard the security of (personal) data and information.

  • Why are date and place of birth requested when registering in the register?

    These are common data for certification processes, based on regulations. At some point, the identity of the registrant must be established, and this is done using several variables, including date and place of birth. This is important to prevent mistaken identity. A name and date of birth alone are not sufficient to distinguish individuals.