The NRFG – Committed to Trust, Quality, and Accountability

You can check whether a DPO is registered by consulting the public register on the NRFG website. By entering the name and Register-DPO number, you can see whether the DPO is included in the register. Please note: a Register-DPO decides for themselves whether this information is accessible via the NRFG website.
If you, as a DPO, want to be visible/searchable in the public NRFG register after registration, you can choose visibility in the database when registering.
The General Data Protection Regulation (GDPR) gives you the right to contact the DPO of an organization. An organization with a DPO is required to publish the DPO’s contact details, but not their name. A DPO can choose to make their name and Register-DPO number public. The GDPR does not give data subjects specific rights with regard to Register DPOs.
This has not changed with the establishment of the NRFG. You can contact the DPO of the organization that processes your personal data and ask what measures are being taken to protect your privacy. The organization is then obliged to inform you about the processing of your data and your rights under the GDPR.
This has not changed with the establishment of the NRFG. You can contact the DPO of the organization that processes your personal data and ask what measures are being taken to protect your privacy. The organization is then obliged to inform you about the processing of your data and your rights under the GDPR.
This has not changed with the establishment of the NRFG. If you believe that your personal data has been processed incorrectly, you can file a complaint with the DPO of the organization that processes your data. If you are not satisfied with the organization’s response, you can submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
This has not changed with the establishment of the NRFG. As a data subject, you have several rights under the General Data Protection Regulation (GDPR), including the right to:
You can exercise these rights by contacting the DPO of your organization.
This has not changed with the establishment of the NRFG. Organizations that are required to appoint a DPO must make the DPO’s contact details public. You can usually find this information on the organization’s website or by contacting the organization directly.
This has not changed with the establishment of the NRFG. The DPO is responsible for monitoring compliance with data protection regulations within the organization. This includes informing and advising the organization and its employees about their obligations under the GDPR, monitoring compliance with the GDPR, and acting as a contact point for data subjects and the supervisory authority.
This has not changed with the establishment of the NRFG. The DPO’s contact details must be publicly available. You can usually find this information on the organization’s website or by contacting the organization directly.
This has not changed with the establishment of the NRFG. If an organization has not appointed a DPO when required, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) can take enforcement action, such as imposing fines. You can file a complaint with the Authority if you believe your organization is not meeting its obligations under the GDPR. Good to know: for government bodies and public organizations, appointing a DPO is always mandatory, regardless of the type of personal data they process.