Research, compiled

    Data rules agenda for Dutch logistics

    The Dutch cybersecurity act, the Data Act and the Data Governance Act all touch how you keep, share and account for data. This page states, per obligation, the date it starts, who it applies to, and where it is written.

    See the Data & AI PlatformMethodology
    Rows
    4
    Primary sources
    4
    Sources last read
    28 August 2026
    Application dates, what applies, who it applies to and the source
    FromWhat appliesWhoSource
    24 September 2023appliesData Governance Act applies: rules for re-use of public sector data and for data intermediaries.Public bodies and data intermediaries[4]
    12 September 2025appliesData Act applies: access to data from connected products, and rules for switching between cloud services.Manufacturers of connected products, providers of data processing services and their customers[3]
    15 August 2026appliesDutch Cybersecurity Act (NIS2 transposition) in force: duty to register, duty of care and incident reporting for essential and important entities.Over 8,000 organisations in the Netherlands, including transport and logistics[1]
    12 January 2027upcomingSwitching charges for data processing services are fully withdrawn under the Data Act.Providers of cloud and data processing services[3]

    Sources

    1. [1] NCSC (NL), Cybersecurity Act (NIS2 transposition) (read 28 August 2026)
    2. [2] Dutch government, cybersecurity act and critical entities act in force from 15 August 2026 (read 28 August 2026)
    3. [3] Regulation (EU) 2023/2854 (Data Act), EUR-Lex (read 28 August 2026)
    4. [4] Regulation (EU) 2022/868 (Data Governance Act), EUR-Lex (read 28 August 2026)

    This page is not legal advice. We keep the dates current and point at the primary text, so you sit down with your lawyer with a concrete rule in hand.

    Keeping it current

    What changes on an update

    We re-read the sources every month. When a date shifts or an obligation is added, we amend the row and record the new read date on the source.

    Maintained byMax van GenderenFounder of Datahub, data and AI architectureReviewed by: Datahub — Datahub editorial team

    Deze pagina staat op naam. Wij lezen de bronnen maandelijks opnieuw en noteren wat er verandert.

    Next step

    Knowing where you stand before the date arrives

    Six questions on definitions, ownership and traceability. You get an honest outcome straight away, and one first step.

    Take the foundation scanAll measurements