ISMS Copilot
UAVG

UAVG Copilot

Navigate Dutch data protection law with confidence

What the UAVG Copilot Can Do

Understand which UAVG derogations apply to special category data (Artt. 22-30)

Identify permissible grounds for processing criminal data under Artt. 31-33

Map the consent age threshold and parental representation rules under Art. 5

Navigate AP supervisory powers, enforcement tools, and fine tiers (Artt. 14-18)

Interpret BSN processing restrictions and permitted use cases under Art. 46

Track legal remedies via Awb and civil procedure routes under Artt. 34-35

About UAVG Copilot

The Uitvoeringswet Algemene verordening gegevensbescherming (UAVG) implements the AVG in Dutch law, adding national derogations, establishing the Autoriteit Persoonsgegevens, and setting out remedies for data subjects. UAVG Copilot helps you interpret these provisions in the context of your organisation's processing activities.

Cross-framework mappings

Working across UAVG and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.

Browse free mappings

Frequently Asked Questions

What is the UAVG?

The UAVG (Stb. 2018, 144) is the Dutch national implementation law that supplements the AVG/GDPR with Netherlands-specific derogations, designates the Autoriteit Persoonsgegevens as supervisory authority, and establishes legal remedies for data subjects. It replaced the Wet bescherming persoonsgegevens (Wbp) on 25 May 2018.

How does the UAVG Copilot help?

UAVG Copilot helps you interpret Dutch-specific provisions: such as the derogations for special category and criminal data, the BSN restriction in Art. 46, and the rechtsbescherming routes in Artt. 34-35: so you can apply them accurately alongside your AVG obligations.

Does the UAVG set a different consent age for children than the AVG?

Yes. Art. 5 UAVG sets the parental consent threshold at 16 years, the upper end of the range permitted by AVG Art. 8(1), meaning a wettelijk vertegenwoordiger must provide or authorise consent for children under 16 for information society services.

Ready to do compliance work faster?

Built for speed, accuracy, and audit-ready output.