On January 1, 2016, the Dutch bill introducing compulsory notifications for data security breaches (see here) came into force. The legislation also increases fines in case of privacy violations.
The Dutch law anticipates the new Regulation which introduced a generalized data breach notification (within 72 hours) to enter into force in 2018. See here.
For more information, Francesca Giannoni-Crystal