Today, the Personal Data Authority (AP) published its supervisory strategy for the coming years. This supervisory strategy sets out how the AP will work as a regulator.
The supervision strategy of the AP (further) elaborates on the mission statement and describes how the AP will put it into practice in the coming years. When will the AP take action? What do actions look like? How does the AP relate to companies, organizations and governments? What does the AP mean for citizens?
The AP deliberately opts for a broad interpretation of its tasks; that of "social director. In this role, the AP addresses the consequences of social and technological developments. The role of social director is based on three important principles: fundamental values guide our work, we focus on harmful situations and we choose those interventions for which we expect the greatest effect. The fundamental values that the AP prioritizes when protecting personal data are non-discrimination, personal autonomy and freedom, accountability and transparency of power and the security of personal data.
To protect citizens, the AP uses a wide range of interventions. The AP promotes good behavior, monitors compliance, and raises awareness of risks and unregulated activities. The AP works in an effect-oriented way: the choice of intervention depends on the expected effect on the problem.
Examples of the AP's interventions include a phone call, informal conversations, warnings, reprimands, investigations or the imposition of a fine. We also provide information and enter into discussions with organizations we supervise. In this way, we not only enforce, but also work in an agenda-setting and preventive manner.
The surveillance strategy is consistent with previous documents on the AP's mission statement and scope of work as a privacy regulator, such as the "Focus 2020-2023.
