Dutch data protection authority starts a directorate for AI supervision

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) said on 9 October 2026 that it has started a new directorate, Toezicht en Coördinatie AI/Algoritmes (TCA, Supervision and Coordination of AI/Algorithms). TCA has two departments. ARC (AI/Algoritmes Risicoanalyse & Coördinatie) covers AI and algorithm risk analysis and coordination. MTA (Markttoezicht AI) covers AI market supervision: it is preparing future AI Act supervision and building technical expertise to examine and test AI systems. The AP is the intended AI market-surveillance authority, but it has not yet been designated. It gets those market-supervision powers only once the Dutch AI Act implementation law (Uitvoeringswet AI-verordening) is in force, and work on that law is still underway. TCA is setting up an AI sandbox and a joint AI coordination centre with the Rijksinspectie Digitale Infrastructuur (RDI).

What it means for business: Dutch AI Act enforcement powers are not yet in place, but the AP is building its supervision team and a sandbox with RDI.