Wire · regulatory
The Dutch GDPR Implementation Act Gets an Update What You Need to Know
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 17 September 2026 · Fusion42 review
The Dutch GDPR Implementation Act updated in September 2026 introduces three key changes: minors aged 12 to 16 can independently withdraw consent for data processing, biometric data use for authentication requires a substantial public interest justification, and the Dutch Data Protection Authority must publish sanctions with consultation obligations for policy rule changes.
This Wire brief sits within Fusion42's coverage of Cybersecurity.
◆ ◆ The Wire takeaway
You must adjust consent workflows now to handle minors withdrawing data consent independently from age 12 and meet stricter biometrics processing tests. Prepare for higher transparency as regulatory enforcement decisions become public and require engagement with policy consultations.
◆ Coverage
1 source · 16 Sep 2026
◆ Related on Wire
◆ Topics