Enforcement action · Autoriteit Persoonsgegevens

[AP] AP: privacyrisico’s door gebruik menstruatie-apps

[AP] AP: privacyrisico’s door gebruik menstruatie-apps is an AI-related enforcement action involving Autoriteit Persoonsgegevens. The Dutch DPA warns about privacy risks of menstruation apps sharing sensitive user data and reminds providers of GDPR obligations, not ruling out an investigation.

Action details

Agency
Autoriteit Persoonsgegevens
Jurisdiction
NL
Enforcement type
investigation
Document type
advisory opinion
Effective
2026-08-04
Topic
ai privacy

Summary

The Dutch Data Protection Authority (AP) advises users to be cautious when using menstruation apps due to significant privacy risks from sharing highly sensitive personal data. The AP reminds app providers that they must comply with GDPR, specifically regarding explicit consent for processing special categories of data, transparency about data use, and robust data security measures. The AP is considering launching an investigation into these apps.

Primary source

https://www.autoriteitpersoonsgegevens.nl/actueel/ap-privacyrisicos-door-gebruik-menstruatie-apps →

Frequently asked questions

What is [AP] AP: privacyrisico’s door gebruik menstruatie-apps?
The Dutch Data Protection Authority (AP) advises users to be cautious when using menstruation apps due to significant privacy risks from sharing highly sensitive personal data. The AP reminds app providers that they must comply with GDPR, specifically regarding explicit consent for processing special categories of data, transparency about data use, and robust data security measures. The AP is considering launching an investigation into these apps. Primary source →
Which agency brought the action?
Autoriteit Persoonsgegevens brought this enforcement action in NL. Primary source →
What was the penalty?
No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty. Primary source →
When did the action take effect?
The action was effective 2026-08-04. Primary source →
Where can I find the primary source?
The primary source for [AP] AP: privacyrisico’s door gebruik menstruatie-apps is at https://www.autoriteitpersoonsgegevens.nl/actueel/ap-privacyrisicos-door-gebruik-menstruatie-apps. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Regulatory intelligence

Follow reviewed Autoriteit Persoonsgegevens AI enforcement developments.

AIGI monitors cited regulatory change and delivers decision-ready analysis. It does not monitor customer AI systems or enforce policy.