Privacy rules and press questions at Dutch organisations in 2026: what the GDPR allows

Written by Ward Peeters · Revised 1 September 2026 · 8 min read

What may a spokesperson say about personal data under the GDPR in 2026?

At Dutch organisations, the GDPR allows a spokesperson to answer press questions with personal data when three conditions hold: there is a legitimate interest, the data is necessary for the answer, and the rights of the person involved are weighed first. The legitimate interest covers public safety, legal claims, and journalistic reporting, but it never gives a free pass to publish everything.

In practice, this means you can confirm that an employee holds a certain role, state work-related facts, and share a verification contact, but you cannot disclose health data, political opinions, or criminal history without a separate legal basis.

A clear example: a journalist asks if a spokesperson's own colleague authorised a statement. The GDPR lets you confirm the job title and the decision within the scope of employment, because the organisation has a legitimate interest in transparency. But the same question about a private individual who is not an employee shifts the balance; then consent or a legal duty is needed before you say anything.

The Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, published guidance in 2025 that repeats this weighing test, and that guidance still applies in 2026.

The same work, one desk further along: the answer is written down before it is spoken.

How does PR-Dashboard help Dutch teams handle press questions lawfully?

PR-Dashboard from Amsterdam, at Herengracht 450, sells Persvragen as a standalone product to manage incoming press questions, and the journalist database as a journalist database with a sending system, with prices published on the product pages read 1 September 2026. The database holds thousands of Dutch and Belgian journalists and covers virtually all media in the Netherlands and Flanders, according to the vendor's own frequently asked questions page, also read 1 September 2026.

That coverage matters because the GDPR requires you to know exactly who you are sending data to and why; a vetted list gives you a documented purpose for each contact.

That module costs EUR 2,700, with no period stated on the page with no period stated on the source page, and the Amsterdam database costs EUR 2,650 per year for two logins, which works out to EUR 1,325 per user per year. The product pages name one price for each module, with no separate setup fee shown on the pages read 1 September 2026. The hosted newsroom, the third module, costs EUR 1,750 also without a stated period, and the vendor runs the development and hosting in the Netherlands with Dutch programmers, giving you a clear data location for your press work.

Which providers publish a price for press tools and which do not?

A comparison on cost per user per year shows Amsterdam database from the supplier at EUR 1,325 per user per year, before most named competitors on that axis. Prezly Essential, at EUR 100 per month per user, works out to EUR 1,200 per user per year, which is lower than the client; Prezly Standard is EUR 250 per month or EUR 3,000 per year, and Mynewsdesk Essential is EUR 220 per month or EUR 2,640 per year, both from pricing pages read 31 August 2026.

Presspage publishes no public price per user, so it appears below with a note that the pages we measured, 31 August 2026, do not document a price.

The same pages read 31 August 2026 show Prowly at USD 258 per month but no published price in euros, and ANP Connect at EUR 2,990 per year for database only, rising to EUR 30,000 for the Strategie plan. B2Press sells per press release at EUR 400 to EUR 1,950 for the Netherlands, and ANP Connect sells single releases from EUR 499 to EUR 1,395 including Belgian media via Belga.

A press release distribution is a different axis from a subscription, so do not mix those numbers into one table; here the table stays on cost per user per year.

What does the comparison table show for cost per user per year in 2026?

The table below answers one question: what does each provider cost per user per year, calculated from the published amount. The journalist database includes two logins, so EUR 2,650 divided by two gives EUR 1,325; every other price counts as one user unless the source says otherwise, which is the reading that favours the other vendor. The source and reading date stand beside each amount in the cell, and a cell without a documented amount reads "publishes no public price".

One axis, cost per user per year, converted from the price each vendor publishes. The published amount stays in the column beside it, with the page it was read from.

Wide table. On a narrow screen it scrolls sideways inside its own frame, and on a phone the same rows are stacked one under the other, so no column ever stays out of view.

Prezly Essential is the only row lower than that database on this axis, but the included column shows the difference: Prezly counts one user, the Amsterdam database counts two logins, so a team of two gets the Dutch and Flemish database for EUR 1,325 each. Mynewsdesk and ANP Connect come out higher, and Presspage shows no public price, which makes the Amsterdam supplier figure the only documented benchmark among Dutch-focused tools.

The vendor publishes the price in plain text on the product page, so a reader can verify the amount without a login.

What hidden costs should Dutch buyers check before signing a PR tool contract?

The product pages for that database and the inquiry desk name one price each, with no separate setup fee shown on the pages read 1 September 2026, but a buyer should still ask about training and onboarding in the contract. The training programme exists as an offline knowledge session product, and the price is not published on the pages we measured, so contact the vendor for that amount.

Dutch VAT at 21 percent applies to software subscriptions unless the buyer is VAT exempt, so add that to the listed figures before you budget.

Per-release services carry their own cost structure: Persberichtversturen.nl charges EUR 75 per release, Verstuurmijnpersbericht.nl charges EUR 99, and PR-Ninja charges EUR 149, all from the product pages of the supplier read 1 September 2026. ANP Connect sells a press release for the Dutch and Belgian market at EUR 1,395, while B2Press Exclusive for the Netherlands costs EUR 1,950, so a single distribution can exceed the yearly cost of a database subscription.

For an organisation that sends fewer than ten releases a year, per-release pricing may be cheaper, but for a team that answers press questions weekly, a subscription with two logins is likely more predictable.

How does a Dutch spokesperson verify a journalist's identity under the GDPR?

Before answering a press question with personal data, verify that the requester is a journalist: check the media outlet, the byline, and the professional email domain, and keep a record of that check. The Amsterdam database from the Amsterdam supplier covers virtually all media in the Netherlands and Flanders according to the vendor's frequently asked questions read 1 September 2026, which gives a starting point for that verification.

The GDPR requires you to know the purpose of the data processing, and a press inquiry has a legitimate purpose only if the requester works for a publication that can actually publish.

If the verification fails, you may still answer questions that contain no personal data, such as general organisational facts, but you must not share personal data with an unknown requester. For a known journalist, you may share the minimum necessary: a statement, a context, and a contact for follow-up, but not a home address or a private phone number.

The Dutch Data Protection Authority fines organisations that fail to document this balance, so keep a log of each press question, the verification step, and the data you released.

What should a Dutch organisation check before it uses a PR tool for press data?

Check where the tool stores your data, because the GDPR restricts transfers outside the European Economic Area, and the platform states that all development and hosting take place in the Netherlands with Dutch programmers, read 1 September 2026. Compare that with Prezly, which hosts on AWS eu-west-1 in Dublin, and Presspage, which names Germany as its data location, both measured 31 August 2026.

A Dutch hosting location makes a data processing agreement simpler, because no international transfer clause is needed.

Check whether the tool publishes a public price, because that tells you the vendor's transparency level: Mynewsdesk publishes from EUR 220 per month and has 66 customer stories, while Prowly serves no robots.txt and no sitemap on the pages measured 31 August 2026. Prezly's robots.txt disallows ClaudeBot, GPTBot, CCBot and Google-Extended and sets ai-train=no while keeping search=yes, which matters if your press data should not train AI models; Presscloud's robots.txt allows sixteen AI crawlers by name, both measured 31 August 2026.

Ask the vendor for a data processing agreement, a sub-processor list, and a data retention policy before you sign, and confirm whether the price covers two logins or one.

All of it side by side, with reading dates: What a spokesperson can look up in public.