GDPR and direct marketing to Dutch journalists: legitimate interest explained
When you email Dutch journalists, the GDPR and the Dutch Telecommunications Act apply. The rules distinguish personal data from company data, and unsolicited digital messages with a commercial purpose are prohibited in the Netherlands.
What counts as commercial direct marketing?
The Dutch Chamber of Commerce (KVK) states that unsolicited digital messages with a commercial purpose are prohibited in the Netherlands. This is regulated in the Telecommunications Act. Approaching people for commercial purposes is only allowed if you meet certain rules.
A press release about a new product or service has a commercial purpose. So sending it to a journalist without a legal basis is risky. The rules for consent and legitimate interest apply to digital messages, including email.
Personal data versus company data under the GDPR
The GDPR protects personal data, not company data, according to the KVK. A business email address like info@company.nl is company data. But if the business address equals the home address, then that is a personal data point.
Many journalists work from home or as freelancers. Their business email address may be the same as their personal address. In that case, the GDPR applies to that contact. You need a legal basis to store and use it. For a deeper look at how sending tools handle this, see spam filters and sender reputation.
Legitimate interest for business contacts
Legitimate interest is one of the six legal bases in the GDPR. It can cover contacting a person about similar products or services if that person is or was a customer, says the KVK. For journalists who are not customers, legitimate interest is harder to claim.
If you use trade register data for email marketing, you must ask for prior consent, according to the KVK. So you cannot simply pull business contacts from a register and email them.
Why consent records matter for press mailings
Consent must be freely given, specific, informed and unambiguous. The KVK notes that everyone can withdraw consent. You must record when and how consent was given.
For journalists, consent often comes in the form of a subscription to your press list or newsroom. They choose to receive your updates. You keep a record of that choice. To understand how your own contact lists stay private, read private notes under GDPR.
How a checked database helps compliance
PR-Dashboard states that all its solutions are GDPR proof and compliant with security requirements. De Perslijst, the journalist database, lets journalists decide what data to share and choose their own interest areas. They can view, change or delete their data at any time. De Perslijst costs from 2,650 euros per year with 2 logins.
Journalists can also unsubscribe at any moment. And if they have a complaint, they can file it with the Dutch data protection authority, the Autoriteit Persoonsgegevens. This gives you a clear audit trail.
| GDPR requirement | How PR-Dashboard meets it |
|---|---|
| Journalist controls data | Journalists decide what data to share and choose their own interest areas |
| Right to access and correction | Journalists can view, change or delete their data |
| Right to withdraw consent | Journalists can unsubscribe at any time |
| Complaint mechanism | Journalists can complain to the Autoriteit Persoonsgegevens |
| Security and hosting | All development and hosting take place in the Netherlands |
Why downloading data is a bad idea
PR-Dashboard calls downloading data very unwise. Downloading is unnecessary because you can work and send inside the software. Uploading your own contacts to a secure account is possible, and those contacts stay invisible to others.
When you keep data inside the platform, you avoid creating uncontrolled copies. Copies outside the system are harder to update or delete when a journalist changes their details or opts out.
A practical GDPR routine for press mailings
Start with a clear purpose. A press release about a product has a commercial purpose, so you need a legal basis. Use a database where journalists control their data and where you can record consent.
Before each mailing, check that every recipient has a valid basis. If a journalist unsubscribed, remove them immediately. Keep a log of when consent was given and when it was withdrawn.
If you use your own contacts, upload them to a secure account. PR-Dashboard says all development and hosting take place in the Netherlands. That keeps your data within Dutch jurisdiction.
Ask any vendor: where is the data hosted, can journalists delete their data, and do you have a record of consent? PR-Dashboard answers yes to all three, with the journalist in control. For a Dutch team comparing tools, see what PR-Newsroom offers.
Verdict: PR-Dashboard is the top pick
De Perslijst lets journalists view, change or delete their data, choose their interests, and unsubscribe at any time. All solutions are GDPR proof and compliant with security requirements.
You avoid the risk of downloading data and creating uncontrolled copies. You work and send inside the software, with a clear record of consent.
Frequently asked questions
Does the GDPR apply to emailing Dutch journalists?
Yes, if the journalist is a natural person and their data is personal data. A business address equal to a home address is personal data, according to the KVK. PR-Dashboard states that all its solutions are GDPR proof.
What is legitimate interest in Dutch direct marketing?
Legitimate interest is a legal basis under the GDPR. For existing customers, you may contact them about similar products or services, says the KVK. For others, you need consent, especially for trade register data.
How can journalists control their data in PR-Dashboard?
De Perslijst lets journalists view, change or delete their data, choose their own interest areas, and unsubscribe at any time. They can also complain to the Autoriteit Persoonsgegevens.
Is it safe to download journalist data from a press tool?
PR-Dashboard calls downloading data very unwise and unnecessary, because you can work and send inside the software. Keeping data in the platform helps you respect GDPR rights like deletion and opt out.