The duties of the AP derive from the Data Protection Directive that applies to all countries of the EU.

With the change of name as per 1 January 2016, the body was granted the power to impose fines for violations of the Personal Data Protection Act (Wbp).

For governments, the term 'demonstrably necessary' means that there must be a legal basis for the processing of data The supervisory functions mean that the Dutch Data Protection Authority can compel companies and governments to comply with the requirements of the Wbp.

In addition, the AP has the task of advising ministers and the House of Representatives, both solicited and unsolicited, on legislative proposals, in the light of the Wbp or other applicable rules.

[7] The first members of the Data Protection Board were Peter Hustinx (chairman), Ulco van de Pol and Jan Willem Broekema (both vice-chairman).

Hustinx and Van de Pol came from the Registratiekamer at the establishment of the Dutch DPA.