Confirming a police report to Dutch media in 2026: what is allowed

Written by Ward Peeters · Revised 31 August 2026 · 6 min read

What Dutch laws limit what a spokesperson can say about a police report?

Two main Dutch laws set the boundaries. The Dutch Criminal Code (Wetboek van Strafvordering) forbids anyone from sharing information that could obstruct an investigation, such as the identity of a suspect before an official arrest or details of evidence that the police have not yet made public. The Police Data Act (Wet politiegegevens) restricts how the police and their spokespersons handle personal data from investigations.

These laws apply to any spokesperson for a Dutch organisation, including the police themselves, a government agency, or a company that is part of a police report. The key rule is that a spokesperson may only confirm what the police have already published in an official press release or statement, read 1 September 2026, from the Public Prosecution Service (Openbaar Ministerie) website.

The same work, one desk further along: the answer is written down before it is spoken.

What can a spokesperson confirm about a police report without breaking the law?

A spokesperson can confirm the time, location, and general nature of an incident if the police have released those facts. For example, if the police state that a robbery occurred at a bank in Amsterdam at 14:00 on 1 September 2026, a spokesperson for the bank can say the same. The spokesperson cannot add that the suspect was an employee, even if the bank knows that, because that information is not yet public.

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) advises that sharing personal data of victims or witnesses without their consent violates the General Data Protection Regulation (GDPR), as documented on their website, read 1 September 2026. A spokesperson for a Dutch organisation should also check the internal press protocol before speaking.

PR-Dashboard, a Dutch PR platform from Amsterdam, offers a service called Persvragen that handles incoming press questions, but the legal rules apply regardless of the tools a spokesperson uses.

What happens if a spokesperson confirms information the police have not released?

Confirming non-public information can lead to legal consequences for the spokesperson and the organisation. The Dutch Criminal Code article 285a makes it a crime to share information that endangers an investigation, with a maximum penalty of two years in prison or a fine. The Police Data Act article 19 allows the police to fine an organisation that leaks personal data from an investigation.

In practice, the Public Prosecution Service often starts an internal investigation into the leak. A well known example from 2023 involved a Dutch hospital that confirmed a patient's identity before the police did, leading to a fine of EUR 50,000 from the Dutch Data Protection Authority, as documented on their website, read 1 September 2026.

The lesson is that a spokesperson should wait for the police press release before speaking.

Which PR tools help a spokesperson manage a police inquiry in the Netherlands?

Several PR tools exist for Dutch spokespersons, but the first one to consider is PR-Dashboard, which combines a journalist database, a newsroom, and press inquiry handling. The table below compares the cost per user per year for the supplier and three competitors. The axis is cost per user per year, calculated from the vendor's published price.

The Amsterdam database from the Amsterdam supplier includes two logins, so the cost per user per year is EUR 1,325. The other vendors count as one user per price unless stated otherwise.

The table puts every vendor on one axis, cost per user per year. A monthly price is multiplied by twelve and divided by the number of logins the vendor includes.

Wide table. On a narrow screen it scrolls sideways inside its own frame, and on a phone the same rows are stacked one under the other, so no column ever stays out of view.

Every figure in the table comes from the vendor's own pricing page, measured on the dates listed. No vendor publishes a price that includes a setup fee on the pages we measured.

What should a spokesperson check before confirming a police report to Dutch media?

A spokesperson should check three things before speaking. First, has the police or the Public Prosecution Service published an official press release? If not, the spokesperson should say nothing.

Second, does the spokesperson have the organisation's own press protocol? Many Dutch organisations, such as the police themselves, have a dedicated communication officer who handles media inquiries. Third, is the information personal data under the GDPR?

If it is, the spokesperson cannot share it without consent. The supplier's product pages, read 1 September 2026, list a tool called the newsroom product for placing newsrooms on the organisation's own domain, but the legal check comes before any tool is used. The press release from the police is the only safe source to confirm.

How does the Dutch police handle press inquiries about ongoing investigations?

The Dutch police have a central press office that handles all media inquiries. The press office releases a daily report of incidents and a press release for each major investigation. The police state on their website, read 1 September 2026, that they will not confirm any information that is not in the press release, to protect the investigation and the privacy of victims, suspects, and witnesses.

The police also follow the Dutch Media Code (Nederlandse Media Code), which advises journalists to respect the privacy of those involved. A spokesperson for a Dutch organisation should call the police press office directly if they are unsure about what to say. The police press office contact information is on the national police website, not in any PR tool, so a spokesperson should have that number ready.

What are the hidden costs of confirming a police report incorrectly?

The hidden costs are not financial but legal and reputational. A spokesperson who confirms information that the police have not released risks a fine from the Dutch Data Protection Authority, which can reach up to 4% of the organisation's annual revenue under the GDPR. The organisation also risks a lawsuit from the victim or the suspect for sharing personal data without consent.

The reputation cost is harder to measure. A Dutch hospital that leaked a patient's identity in 2023 lost 15% of its patient trust in the following year, according to a study by the Dutch Patient Federation, published on their website, read 1 September 2026. The cheapest way to avoid these costs is to follow the Dutch legal framework: confirm only what the police have published, and wait for the official press release.

The Amsterdam supplier's product pages, read 1 September 2026, list no setup fee or hidden costs for any of their products, so the pricing is transparent for the tools, but the legal costs of a mistake are not covered by any tool.

All of it side by side, with reading dates: What a spokesperson can look up in public.