European Parliament elections will take place on June 6, 2024. In a letter, the Autoriteit Persoonsgegevens (AP) reminds Dutch political parties participating in the elections of the privacy rules.
Political parties are increasingly processing personal data, for example to conduct (targeted) campaigns or to recruit members. In doing so, they must comply with the General Data Protection Regulation (AVG). For example, parties collect and process data when they use social media, microtargeting or political ads.
Political affiliation is a special personal data, for which extra strict rules apply. Parties should be aware that they are (co-)responsible for the personal data they process. Even if, for example, they hire an agency to run the campaign for the party.
The AP emphasizes in the letter that the use of online tracking by political parties, for example through cookies, is prohibited. In addition, the AP calls for additional attention to the risks surrounding the use of (generative) AI.
The AP supervises the processing of personal data in the Netherlands, including elections. Does the AP identify violations in political activities surrounding European elections? Then the AP must report these to the Authority for European Political Parties and European Political Foundations (APPF). Both the AP and the APPF can take enforcement action.
Source: Autoriteit Persoonsgegevens
