Data Protection Officer

Project overview

Assignment Description

Oversee compliance with the GDPR and the Wpg within the ANVS, including:

Background of the assignment

As an independent supervisor of the nuclear and radiation sector and as part of the national government, the ANVS is obliged by the GDPR to appoint a Data Protection Officer.

• Continuously monitor data processing by the ANVS and compliance with the GDPR and Wpg;
• Supervise and advise on conducting privacy audits and data protection impact assessments;
• Prepare advice for the ANVS and its board regarding compliance with the GDPR and Wpg, and explain and disseminate this advice;
• Prepare annual supervision plans;
• Cooperate with and act as a point of contact for the Dutch Data Protection Authority.

Requirements

Desirables

Competencies

Additional Information

When you offer a professional to us as a supplier and they are placed, we will need information from you as a contracting party, including regarding the Chain Liability (Registration of Labour Relations) Act (Wet keten- en inlenersaansprakelijkheid - WKA).

The 'WKA' aims to prevent abuse in the remittance of payroll taxes at all links in the chain; from supplier to client. We cover these risks for our clients by means of a blocked account, the G-account. This is an account to which a portion of the invoice amount is deposited and from which you can pay payroll taxes and VAT to the Tax Authorities. The percentage to be deposited depends on whether you have a SNA certification (NEN-4400-1 or NEN-4400-2) and whether your company is based in the Netherlands or abroad. You can apply for the G-account from the Tax Authorities.

If you cannot obtain a G-account (and you can provide proof of this from the Tax Authorities), you also have the option to provide an accountant's statement (assurance report regarding personnel lending) every quarter. In this, a certified accountant (AA or RA) will issue a statement on the accuracy, completeness, and timeliness of the remittances. Please note that the costs for this statement are at your own expense.

• CIPP/E certification
• WO (university level) education in privacy law, information security, or public administration
• Knowledge of privacy legislation (including GDPR and Wpg) and information security
• Experience working for an independent supervisory authority; (4 years)
• Performing DPIAs: The ability to prepare and assess a Data Protection Impact Assessment. (5 years)
• In-depth knowledge of privacy legislation: Extensive knowledge of the GDPR (General Data Protection Regulation) and the Uitvoeringswet AVG (UAVG) and the Wpg. (5 years)
• Auditing and monitoring: Setting up internal controls and privacy audits within the organization. (5 years)
• Data breach management: Recognizing, registering, and reporting data breaches to the Dutch Data Protection Authority (AP) within 72 hours. (5 years)
• CIPM or DPO certification.
• Knowledge of or affinity with IT is a plus.
• Solution-oriented
• Analytical skills
• Communication skills

Project details

• Start: 2026-11-22T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch