The Dutch Ministry of Justice and Security's Scientific Research and Documentation Center published a review of the implementation of the EU General Data Protection Regulation in the Netherlands. The government-backed study explored 16 questions related to enforcement policies of the Dutch data protection authority, Autoriteit Persoonsgegevens. Results showed potential issues regarding clear sector-specific rules and norms, unpredictable enforcement patterns and relaxed approach to data breach notification enforcement.