The NRFG – Committed to Trust, Quality, and Accountability

Interested parties

Interested parties

  • How do I know if the DPO (Data Protection Officer) processing my personal data is registered in this register?

    You can check whether a DPO is registered by consulting the public register on the NRFG website. By entering the name and Register-DPO number, you can see whether the DPO is included in the register. Please note: a Register-DPO decides for themselves whether this information is accessible via the NRFG website.

    If you, as a DPO, want to be visible/searchable in the public NRFG register after registration, you can choose visibility in the database when registering.

  • What are my rights as a data subject in relation to a Register DPO?

    The General Data Protection Regulation (GDPR) gives you the right to contact the DPO of an organization. An organization with a DPO is required to publish the DPO’s contact details, but not their name. A DPO can choose to make their name and Register-DPO number public. The GDPR does not give data subjects specific rights with regard to Register DPOs.

  • How can I file a complaint against a DPO?

    This has not changed with the establishment of the NRFG. You can contact the DPO of the organization that processes your personal data and ask what measures are being taken to protect your privacy. The organization is then obliged to inform you about the processing of your data and your rights under the GDPR.

  • How can I check whether my personal data is being processed correctly?

    This has not changed with the establishment of the NRFG. You can contact the DPO of the organization that processes your personal data and ask what measures are being taken to protect your privacy. The organization is then obliged to inform you about the processing of your data and your rights under the GDPR.

  • What should I do if I believe my personal data has been processed incorrectly?

    This has not changed with the establishment of the NRFG. If you believe that your personal data has been processed incorrectly, you can file a complaint with the DPO of the organization that processes your data. If you are not satisfied with the organization’s response, you can submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

  • What rights do I have as a data subject under the GDPR?

    This has not changed with the establishment of the NRFG. As a data subject, you have several rights under the General Data Protection Regulation (GDPR), including the right to:

    • Information
    • Access
    • Rectification
    • Erasure
    • Restriction of processing
    • Data portability
    • Not be subject to automated decision-making
    • Object to the processing of your personal data

    You can exercise these rights by contacting the DPO of your organization.

  • How do I know if the organization processing my personal data has appointed a DPO?

    This has not changed with the establishment of the NRFG. Organizations that are required to appoint a DPO must make the DPO’s contact details public. You can usually find this information on the organization’s website or by contacting the organization directly.

  • What is the role of the DPO in an organization?

    This has not changed with the establishment of the NRFG. The DPO is responsible for monitoring compliance with data protection regulations within the organization. This includes informing and advising the organization and its employees about their obligations under the GDPR, monitoring compliance with the GDPR, and acting as a contact point for data subjects and the supervisory authority.

  • How can I contact the DPO of the organization that processes my personal data?

    This has not changed with the establishment of the NRFG. The DPO’s contact details must be publicly available. You can usually find this information on the organization’s website or by contacting the organization directly.

  • What happens if an organization has not appointed a DPO even though it is required to do so?

    This has not changed with the establishment of the NRFG. If an organization has not appointed a DPO when required, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) can take enforcement action, such as imposing fines. You can file a complaint with the Authority if you believe your organization is not meeting its obligations under the GDPR. Good to know: for government bodies and public organizations, appointing a DPO is always mandatory, regardless of the type of personal data they process.