On December 17, 2015, the DDPA began investigating (source document in Dutch) the Dutch Healthcare Authority's ("DHA") Diagnosis Information System's compliance with the data privacy requirements set forth by the DDPA. According to the DDPA, because the DHA processes sensitive personal data, it must take effective measures to reduce the linkability of a dataset with the original identity of a data subject. The DHA announced that it will stop providing data from the DIS to third parties while the investigation is ongoing.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.