Privacy - Protection of personal data

In the Netherlands, the directive has been transposed into the Personal Data Protection Act
The Dutch Personal Data Protection Act, abbreviated Wbp, provides rules to protect the privacy of citizens. The Act came into force on 1 September 2001 and replaced the Personal Data Registration Act (1989). In this sixth blog of the series Cybercrime, Security and Privacy more about protecting personal data.

European data protection directive (95/46/EC)

The Wbp is largely based on the European Data Protection Directive (95/46/EC). The European Data Protection Directive reports the following.
(46) Whereas the protection of the rights and freedoms of data subjects with regard to the processing of personal data requires that appropriate technical and organizational measures be taken, both at the time of the design of the processing system and at the time of the processing itself, particularly in order to maintain security and thereby to prevent any unauthorized processing; whereas it is incumbent on the Member States to ensure that controllers comply with these measures; whereas these measures must ensure an appropriate level of security, taking into account the state of the art and the costs of their implementation in relation to the risks inherent in the processing and the nature of the data to be protected.

Important personal data to protect

All data that can be misused, in any form, must be protected in relation to the cost and risk. Below are some examples of the most important personal data that must be protected.

• Credit cards
• Privacy sensitive data
• Shopping cart and products
• First name, Last name
• Financial Information
• Credit card numbers
• Citizen service number
• Passport number
• Driver's License Number
• Delivery address
• Cell phone number
• Email address
• Date of birth
• Passwords