Dutch Data Protection Authority Sets Three Priorities for 2026–2028: Mass Surveillance, AI Oversight, and Digital Resilience

The Dutch Autoriteit Persoonsgegevens (AP) has published its Annual Plan 2026, identifying three strategic priorities for 2026–2028: countering mass surveillance, intensifying oversight of artificial intelligence, and strengthening digital resilience. In the law enforcement domain, the AP will continue inspections of police technology use, applying strict tests of necessity, legality, and proportionality. The regulator will also publish a vision document on generative AI and GDPR requirements, and issue biannual AI and algorithm risk reports.

In this domain: EU AI Act compliance: August 2026 deadline and penalty exposure for high-risk deployers · Statewatch: ETIAS AI use exempt from AI Act oversight until 2030 — fundamental rights gap flagged · Sussex Police switch on Acusensus AI cameras for seatbelt and phone offences