The privacy watchdog CBP is working on making the rules on data protection clearer for companies and public institutions so that citizens’ right to privacy is better safeguarded, reports Thursday’s Financieele Dagblad.

CBP chairman Jacob Kohnstamm says there is confusion on what is and what is not allowed in terms of data protection because legislation on the topic is too vague.
‘In the law on data protection there is only a rather generally formulated norm which says that you should be careful to protect personal information,’ Kohnstamm is quoted by the paper as saying.
The CBP is currently analysing precisely what is intended by this phrase in the law and expects to come up with clear guidelines later this year, says the FD.
In 2007, the privacy watchdog established privacy guidelines for websites, covering not only data protection, but also other issues such as the obligation to publish the identity and contact details of the web manager.
Since 2007, the privacy watchdog has regularly fined companies and organisations that have failed to inform the CBP that they keep files on individuals, says the FD. The fine for contravening this regulation is €4,500.
On top of this, the CBP penalises firms that, for example, fail to explicitly ask permission for passing on email addresses to third parties.
In June the CBP fined four hospitals for being sloppy with personal information held on their databases.