A marketplace notice, a cloud contract, or a data request can now touch cash, proof, and control.
Dutch supervision is moving closer to the systems that carry sales, data, updates, and money. For a small seller, that can mean a weekend lost before anyone understands the problem. A product listing disappears. The dashboard shows a short notice. The supplier says the item is fine. Customers want answers. Cash that should arrive on Tuesday becomes a question for Friday.
The rulebook has started to work
In a recent ACM speech, Mickie Schoch, director Telecom, Transport and Post, placed supervision inside the wider digital economy. She named the Digital Services Act, the Platform-to-Business Regulation, the Data Act, the Data Governance Act, and national support around the Digital Markets Act. The point is simple. Digital rules are moving closer to the places where small firms actually trade.
The signal has to become readable
That change is no longer just Brussels language. The Digital Services Act has applied since February 2024 to online marketplaces, social networks, search engines, cloud providers, online travel and accommodation platforms, internet providers, and content-sharing services. National supervision in the Netherlands started on 4 February 2025, with ACM and the Dutch Data Protection Authority as supervisors.
The Ministry of Economic Affairs’ 2025 annual report shows the machinery in use. ACM opened an investigation into Snapchat over trade in illegal vapes through that service. Researchers can apply to ACM for access to non-public data from large online platforms and search engines. ACM also certified four trusted flaggers.
For business, that changes the weight of ordinary records. Reports, platform notices, account blocks, data refusals, and unclear terms can now become the material through which supervision sees a market.
Small firms live inside larger systems
Most small firms are not gatekeepers, cloud providers, or large platforms. Many still live inside systems controlled by those actors.
What the signal changes
CBS shows how wide the digital layer has become among Dutch companies with ten or more employed persons. In 2025, 82 percent of staff had internet access for work. Eighty percent of those companies supported teleworking. In 2024, 27 percent had electronic sales through a website, app, or EDI. In 2025, 33 percent used one or more AI technologies, up from 23 percent in 2024 and 14 percent in 2023.
The measure starts at ten employed persons, but the same pattern is familiar to microbusinesses too. Cloud accounting, booking tools, payment providers, marketplace accounts, review systems, social media shops, customer files, delivery records, and product data all sit in the daily stack. The company may feel local. Its evidence often sits elsewhere.
Where cash meets proof
For the seller whose product vanished online, the first problem is cash, customer trust, and time. KVK guidance makes the ordinary duties concrete. Entrepreneurs must give clear information about the business and the service. For consumer sales, they must explain the cooling-off period, delivery, late delivery, and the 30-day delivery rule.
There is a harder edge. KVK warns that a platform can take products offline. It also notes that imported product safety remains the seller’s responsibility. The platform may control visibility, while the seller still carries the customer conversation.
A sensible founder will want the trail in one place: the product page, platform terms, delivery promise, return record, discount history, review handling, supplier documents, safety information, and the platform notice. Not because paperwork is beautiful. Because reconstruction is cheaper than memory.
Cloud freedom is a business question
ACM also links digital supervision to cloud services. The speech says ACM is working on cloud guidance and expects publication in the second half of 2026. CBS adds the market reality. Most cloud services in the Netherlands and globally are supplied by a small number of very large providers, and the Dutch cloud market is dominated by foreign providers.
Foreign cloud can work well. Dependence still needs a name. The useful question is plain: can the business leave without losing usable history?
What founders should check
Leaving is more than a contract clause. It is export format, user permissions, audit trails, backups, identity access, invoice history, integrations, and the hours needed to rebuild work somewhere else. If a bookkeeping office, webshop, architect, therapist, hotel, or repair business cannot answer that question, the cloud invoice is hiding a continuity issue.
Data follows the product after sale
The Data Act brings another shift. The ACM speech points to smart devices, sport watches, thermostats, milk robots, and truck motor-management systems. ACM ConsuWijzer explains that users have rights to data from smart devices and connected services. Before purchase, rental, or lease, they must receive clear information about collected data and access. Access must be safe, easy, and free.
Users may also share data with another company, such as a garage for vehicle maintenance. For a small business, that reaches beyond technology shops. A transport firm may need truck data for maintenance. A farmer may need machine data for planning. A repair company may need access to diagnose a fault.
KVK guidance on digital products points in the same direction. Devices with software, apps, online services, games, and streaming services carry update duties. The sale is not always the end of the responsibility.
The useful discipline is modest
The Digital Markets Act sits closer to the largest platforms. ACM’s speech says enforcement lies exclusively with the European Commission, while national competition authorities such as ACM can investigate locally and support the Commission. A small app developer or webshop remains a dependent user, not a gatekeeper. Its useful task is to understand when one route controls customer access.
That is where the business questions become practical. Who controls access to customers? Who can pause payment? Who can remove a listing? Who holds the data? Who explains ranking? Who can export the customer list? Who answers when a product update fails?
Back to the seller with the missing weekend. The better business is not the one with the thickest legal folder. It is the one that can answer quickly, calmly, and with dated evidence. Digital supervision is becoming active because the market has become active in digital places. Small firms do not need theatre. They need cleaner traces of the systems they already depend on.
Sources
- Speech Mickie Schoch: Toezicht op de digitale economie en innovatie | ACM
- Rijksoverheid – DSA national supervision is active
- Rijksoverheid – 2025 follow-up shows enforcement machinery in use
- Rijksoverheid – Digital Markets Act and gatekeeper dependence
- Rijksoverheid – Data Governance Act and data intermediaries
- ACM ConsuWijzer – Data Act rights around smart devices and connected services
- CBS – Cloud market dependence and hyperscalers
- CBS – Dutch business digitalisation has widened the affected group
Referenced in the article
Column | Market Pulse
Hormuz Reaches the Dutch Delivery Van Before the Annual Accounts
A sharp fall in Gulf imports matters most when fuel, freight and customer prices move on different clocks.
The Polder is written for readers who need the Dutch business environment translated into practical meaning. Corrections, source policy and editorial accountability are part of the publication record.
