At present, privacy is in the spotlight as the European General Data Protection Regulation (GDPR) needs to be implemented. This will cause many changes, but for organizations the challenges ahead actually remain the same, possibly with a different coloring.
For example, the Dutch Data Protection Authority (DPA) can start an investigation that concerns you.