The European Union has announced that the revised rules within the GDPR 2.0 aimedare focused on transparency, control and responsibility when processing personal data. Where previously the focus was on large companies and governments, self-employed persons and SMEs are now explicitly part of the enforcement policy.
In short: if you process personal data – and most self-employed people and suppliers do – then you are required to demonstrate that you do this in a secure and transparent way. Think of:
IT people who work with customer databases or have access to systems.
HR-consultants who manage applicants' data.
Communication and marketing professionals who manage email campaigns or analyze customer data.
Healthcare professionals who work with medical data.
The time of “I'm too small, that doesn't apply to me” is over.
But what actually changes now?
The tightened privacy rules raise the bar. Here are the three most important changes:
1. Demonstrable compliance is required
In 2025, self-employed people must also be able to show how they comply with the GDPR. That means: maintaining a processing register, recording consents and being able to demonstrate that you have taken appropriate technical and organizational measures.
2. Higher fines and faster enforcement
The Dutch Data Protection Authority is getting more resources to carry out inspections. And yes, also of self-employed individuals and small businesses. Fines can amount to tens of thousands of euros, even in cases of ignorance or inadequate documentation.
3. More responsibility for clients
Clients may no longer assume that the freelancer 'will take care of it themselves'. As a client you remain jointly responsible for data processing. So you must know whether your freelancers are compliant, and make agreements about this in the data processing agreement.
What does this mean for you as self-employed professionals?
As a self-employed person, it is crucial that you have a clear picture of exactly which personal data you process. Think about your processes: how do you collect data? And in what way do you ensure that that data is stored and shared securely? Keeping a simple but up-to-date processing register is essential for this. In addition, it is important to be transparent toward your customers: they need to know what you do with their data and why.
For example, do you work as an IT professional with access to customer data or are you active as a marketer with tracking tools and mailing lists? Then you fall directly under the tightened regulations and these obligations apply to you.
It may sound like extra paperwork, but see it as an opportunity. By having your affairs in order, you not only radiate professionalism, but you also inspire confidence in clients. And that’s precisely what sets you apart in an increasingly competitive market.
What does this mean for clients and suppliers?
Do you work with self-employed professionals? Then your organization also bears an important responsibility when it comes to data security and GDPR compliance. You will need to assess whether the freelancers you work with operate in a GDPR-compliant way, or whether you support them in this. In addition, it is necessary to make clear agreements and record them in data processing agreements, so that both parties know where they stand.
You also need to be able to demonstrate that you handle the data processed by external professionals responsibly. That requires more than just good intentions: it means consciously choosing to collaborate with professionals who not only understand what data governance entails, but are also willing to continuously develop in this area. That is not only safer, it is also a strategic advantage.
How to prepare: practical tips
1. Work with templates: There are ready-made formats available for processor agreements and processing registers.
2. Ask for help where needed: A privacy specialist or GDPR coach can help you set everything up properly in one day.
3. Use tools that support you: think of secure storage, encrypted communication, and clear cookie and privacy statements on your site.
4. Show what you do: Transparency is key. Make clear to your customer how you handle their data – that builds trust.
Would you like to stay informed about developments in the market for you as a freelancer or client? Sign up here for our newsletter and stay up to date with the latest trends and developments.
