On March 15, the Dutch Data Protection Agency ("DDPA") wrote a letter to the Royal Dutch Society for Physiotherapy (source document in Dutch) regarding earlier questions concerning the security of patient contact forms. The DDPA responded that sensitive personal data submitted through web applications needs to be presented through a secure, https connection.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.