The processing of (personal) data in the context of investigation (BOA task) is subject to the Police Data Act (Wpg). In order to establish that the water boards have applied these rules in accordance with the legal requirements, the Regulation on periodic audit of police data has been drawn up. This requires all organizations where criminal data is processed to perform periodic external privacy audits by means of an Electronic Data Processing (EDP) audit. The contracting authority is looking for an audit service provider who can carry out the external Wpg audits for the 21 Water Boards.

For each of the 21 water boards, the audit will be carried out twice, in 2023 and 2026. These each contain a report of recommendations. In addition, a sector report is also requested.