autoriteitpersoonsgegevens.nl

Context

www.autoriteitpersoonsgegevens.nl is the website of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). It is the national supervisory body that oversees compliance with data protection rules in the country. The data controller is the authority itself. The site is informational: explanations of the rules, news, and the filing of complaints and requests.

Scan: 20 requests to 1 domain, homepage, captured in a clean Edge browser without a VPN or ad blocker. Every request goes to the site’s own domain.

Who receives the data

There are no recipients at all.

Every request in the scan goes to the site’s own domain: markup, styles, scripts, logos, fonts, images. There is not a single third-party service — no analytics, no advertising, no monitoring, no anonymized government statistics. No in-house analytics was found on the page either.

Was there a consent banner

A consent banner is not needed here, and this is a case where its absence is correct. The page has no third-party services, no in-house analytics, and no cookies. There is simply nothing to obtain consent for: not a single processing activity requires it. Not a single cookie was set during the entire session.

What fires before consent

Only the page’s own resources. Before any interaction, only markup, styles, scripts, fonts, and images from the site’s own domain load. The scan contains no analytics, no advertising domains, no social plugins, no session recording, and no counters.

What works in the site’s favor

This is worth highlighting. The site makes not a single request to third-party domains and doesn’t even run anonymized in-house statistics. In other words, there is no data collection about the visitor on the page at all — not for advertising, not for analytics, not for statistics. For a data protection supervisory authority, this is fully consistent with what it demands of others.

Conclusion

Autoriteitpersoonsgegevens.nl is an exceptionally clean configuration. The data protection supervisory authority’s site makes no third-party requests, doesn’t even run anonymized in-house statistics, and sets no cookies. There is nothing to obtain consent for, so no banner is needed. The key takeaway for the reader: there is no visitor data collection here whatsoever, and the data protection supervisory authority runs its site exactly as the rules prescribe — without a single external tracker and without a single cookie. No violations were recorded.