Dutch Government Validates Salesforce Compliance with EU Data Protection Laws
Salesforce has passed a comprehensive Data Protection Impact Assessment (DPIA) conducted by independent experts on behalf of the Dutch government. The assessment, which took place from September 2022 to June 2025, aimed to identify and address potential privacy risks in Salesforce's Sales and Service Cloud offerings.
The DPIA report, published by the Strategisch Leveranciersmanagement Rijk (SLM) on August 11, 2026, highlighted several key strengths of Salesforce's services, including its data localization controls. The Dutch government has confirmed that when applying the recommended measures, customers can use the tested services in compliance with GDPR.
Salesforce is committed to customer trust and success, and this DPIA is a significant milestone in its dedication to privacy, transparency, and compliance. The company plans to continue investing in robust sovereignty controls for Customer Data, including its EU Operating Zone (EUOZ).