Dutch Data Protection Authority
IPY-002
-
Last updated
Active
Description
The supervisory authority for the GDPR in the Netherlands, which Tidewell IT deals with as a processor for its customers and as an employer.
Requirement
Source
Mandatory
Last updated
A personal data breach is notified to the authority within 72 hours when Tidewell IT is the controller, and to the customer without undue delay when it is the processor.
GDPR Art. 33
Mandatory
Processing for a customer follows written instructions in a processor agreement, and sub-processors are engaged only with the customer's approval.
GDPR Art. 28
Mandatory