Obligations under the GDPR
The General Data Protection Regulation (GDPR) has been in force in the Netherlands since 25 May 2018.
Under the GDPR, Palga has certain obligations when processing personal data for scientific research. A key obligation is that Palga must be able to demonstrate its compliance with the law: the accountability obligation. This means that Palga must be able to produce documents to show that it has taken appropriate organisational and technical measures to comply with the GDPR. The Dutch Data Protection Authority monitors compliance with privacy legislation.
The GDPR also stipulates that organisations that regularly process personal data must have a data protection officer (DPO) dpo@palga.nl. Complaints about Palga’s handling of your privacy can be addressed to the DPO.