Standards & legislation

Wpg (Dutch Police Data Act)

The Wet politiegegevens governs the processing of police data, including by special investigating officers (boa's) at Dutch municipalities and regional services. Annual internal audits and periodic external audits are mandatory.

Wpg (Dutch Police Data Act) in brief

Organisations employing special investigating officers fall under the Wpg for that data processing, with its own regime alongside the GDPR: stricter purpose limitation, authorisations, retention periods and a mandatory audit cycle with annual internal audits and a four-yearly external audit.

The library contains the NOREA Wpg guidance with the corresponding legislation-to-control links. Privorium supports Wpg accountability alongside the GDPR in one environment.

Verified counts

Framework

36 controls

Handreiking Privacy Audit Wpg voor boa's (version 2024 (1.0, 2024-09-03)).

Legislation

71 articles

Wet politiegegevens.

Links

37 legislation-to-control links

Direct references from statutory articles to concrete controls in the library.

Cross-references

65 links

To 38 shared controls, the bridge to other frameworks.

Library

41 frameworks

This standard does not stand alone: the library counts 1,807 controls and 2,224 cross-references.

Domains in NOREA Wpg Handreiking

  • Overig (5)
  • Art 8 lid 1 en 2 (1)
  • Art 7a (1)
  • Art 7 (1)
  • Art 6c (1)
  • Art 6b (1)
  • Art 6 lid 7 (1)
  • Art 6 lid 1 t/m 6 Art 6a (1)
  • Art 5 (1)
  • Art 4c (1)

Official text: Wet politiegegevens

Get started with Wpg (Dutch Police Data Act)

Request a demo or see how Privorium supports this standard.

Frequently asked questions

When does my organisation fall under the Wpg?

As soon as you employ special investigating officers (boa's), for example at a municipality, regional service or transport company, the processing of their investigation data falls under the Dutch Police Data Act, with its own regime alongside the GDPR.

Which audits does the Wpg prescribe?

An annual internal compliance audit and at least once every four years an external audit by an independent auditor. Results go to the Dutch Data Protection Authority on request.

How does Audirium support Wpg accountability?

The library contains the NOREA Wpg guidance with legislation-to-control links, and Privorium supports Wpg accountability alongside the GDPR in one environment, including the internal audit cycle.