Since January 1st of this year Dutch municipalities are obliged by law (meldplicht datalekken) to register data leaks. Private and public organisations who process personal data are obligated to report misuse of this data as a result of data leaks. The objective of this law is to better protect private data. Dutch municipalities have to register their leaks through Autoriteit Persoonsgegevens (AP), which literally translates as: Authority Personal Data. Of the 390 Dutch municipalities 172 have registered data leaks which comes down to 44% of the Dutch municipalities. Some municipalities have registered more than one leak by which the overall data leaks coming from municipalities accumulates to 300.
For more info browse here.