Friday, Jul 24, 2026 The claims desk. Receipts included. POWERED BY LENZ
IsThis

LEGAL

The Claim

Under the Dutch Cyberbeveiligingswet (Cbw), municipalities can be fined up to €10 million for failing to meet duty-of-care (zorgplicht) requirements.

The Short Version

The statement captures the substance of the adopted law, but it overstates its current legal effect. Official sources and municipal guidance indicate that municipalities are expected to fall under the Cbw regime and that duty-of-care breaches can trigger fines reaching €10 million. But the Act is stated to take effect on 15 August 2026, so as of 12 July 2026 those fines are not yet enforceable under the Cbw.

Caveats

  • The Cyberbeveiligingswet is not yet in force as of 12 July 2026; official government communication says it starts on 15 August 2026.
  • The sanction is simplified: for essential entities the legal maximum can be €10 million or 2% of worldwide annual turnover, whichever is higher.
  • The municipal link is well supported by official and VNG guidance, but the provided excerpts do not quote the specific primary classification article naming municipalities directly.

The Receipts

  1. Staatscourant 2025, 19086 | Overheid.nl > Officiële bekendmakingen

    Overheid.nl

  2. Directive (EU) 2022/2555 (NIS 2 Directive), Article 34 – Administrative fines

    EUR-Lex

  3. Cyberbeveiligingswet en Wet weerbaarheid kritieke entiteiten vanaf 15 augustus 2026 van kracht

    Rijksoverheid

  4. Cyberbeveiligingswet

    Rijksinspectie Digitale Infrastructuur (RDI)

  5. Wat zijn de verplichtingen onder de Cyberbeveiligingswet?

    Digitale Overheid

  6. Cyberbeveiligingswet

    Nationaal Coördinator Terrorismebestrijding en Veiligheid (NCTV)

  7. Zorgplicht

    NCTV

  8. Veelgestelde vragen Cyberbeveiligingswet

    Data voor gezondheid

  9. Cyberbeveiligingswet

    Data voor gezondheid (programma van VWS/Rijksoverheid)

  10. Zorgplicht | NCSC

    Nationaal Cyber Security Centrum (NCSC)

+ 16 more sources — see the full list on Lenz

Filed Under

CyberbeveiligingswetMunicipalities In The Netherlands