Prospecting in the Netherlands: B2B appointment setting rules
Article 11.7 of the Dutch telecom act sorts your targets by legal form. Calling a BV is allowed, calling a sole trader needs consent: 76.0% of Dutch businesses are natural persons.
The short answer
If you run B2B appointment setting into the Netherlands — from France, from Belgium or from anywhere else — the rule that shapes the campaign is not the GDPR. It is article 11.7 of the Dutch Telecommunicatiewet[1], and it sorts your targets by legal form, not by size. Calling a BV or an NV without prior consent is allowed; calling a Dutch sole trader is not. Since 1,862,975 of the 2,450,355 businesses in the Netherlands are natural persons[4], the first move is not a call script. It is a filter on legal form.
Three sentences to keep. Phone call to a Dutch legal entity: allowed, no consent needed. Phone call to a sole trader (eenmanszaak, vof): prior consent required. Email and SMS: consent, unless the address was published for receiving that kind of message.
What article 11.7 actually says
The article reads in order. Paragraph 1 bans automated calling systems, fax and electronic messages — email, SMS — for unsolicited commercial communication, unless the sender can demonstrate that the end user gave prior consent. Two details matter: the text does not say “consumers”, so it covers companies as well; and the burden of proof sits with the sender, not with the person complaining[1].
Paragraph 2 extends that rule to other means — a call placed by a human being — but only “aan natuurlijke personen”, to natural persons. Everything else follows from that wording: a legal entity is not covered, so a commercial call to a BV remains possible without consent[1].
Paragraph 3 then opens a derogation from paragraphs 1 and 2 for a legal entity, or for a natural person acting in the course of a profession or business, on one precise condition: the sender uses electronic contact details that the end user has intended and made public for receiving that kind of communication, and uses them in line with the purposes attached to those details[1]. Read that twice before assuming it covers any address you found on a website: it turns on the stated intention of the address holder, not on the fact that the address is reachable.
Two formal paragraphs finish the job. Paragraph 7 requires every message to carry the real identity of the party on whose behalf it is sent, plus a valid postal address or number for asking it to stop. Paragraph 8 forbids hiding your calling number[1].
And what no longer exists: article 11.8, which carried the Bel-me-niet do-not-call register, has been repealed since 1 July 2021[1]. There is no Dutch suppression list to screen against before dialling. The supervisor is the ACM, which can impose a fine of up to EUR 900,000, or 1% of the company's turnover if that is higher[2].
Three quarters of Dutch businesses are natural persons
This is why an unfiltered Dutch list is worth nothing. For the fourth quarter of 2026, Statistics Netherlands (CBS) counts businesses by legal form[4]:
| Netherlands, Q4 2026 | Count | Share | Call without consent |
|---|---|---|---|
| All businesses | 2,450,355 | 100% | — |
| Natural persons | 1,862,975 | 76.0% | No |
| Legal entities | 587,380 | 24.0% | Yes |
| Of which: one person employed | 2,027,790 | 82.8% | — |
So your callable universe without consent is not 2.45 million companies. It is 587,380. The ACM puts it in the same terms: consumers and small entrepreneurs — zzp'ers and vof's — are covered by the consent requirement, and that protection does not stop at former customers[3]. A Dutch sole trader who bought from you last year is not callable today on that basis.
Netherlands, Belgium, France: three regimes, three different moves
One list, three countries, three sets of obligations. The table says where to look; it does not replace the cited texts.
| Move | Netherlands | Belgium | France |
|---|---|---|---|
| Call to a legal entity | Allowed without consent: paragraph 2 only covers natural persons[1] | Allowed, but the list must be screened against the “Do not call me” list[9] | Allowed on an opt-out basis: legitimate interest where the subject relates to the person's profession[7] |
| Call to a sole trader or a consumer | Prior consent, proof on the caller[1] | Any Belgian phone subscriber, private or business, can register its number on the list[9] | Consumers: prior consent since 11 August 2026, calls Monday to Friday 10:00-13:00 and 14:00-20:00[7] |
| Suppression list to screen | None: article 11.8 repealed on 01/07/2021[1] | Yes, “Do not call me”, Code of Economic Law art. VI.110-VI.115[9] | Bloctel for consumers; the new regime rests on consent[7] |
| B2B email | Consent, unless the address was intended and published for that use[1] | Covered in our article on GDPR rules for B2B prospecting in France, Belgium and the Netherlands | Opt-out; generic addresses such as info@ or contact@ belonging to legal entities fall outside those principles[8] |
| Regulator | ACM for the telecom act, Autoriteit Persoonsgegevens for the GDPR[2] | FPS Economy and the Belgian DPA | CNIL[7] |
Building a clean Dutch list for B2B appointment setting
The official source is the KVK Business Register. Address selections are ordered by email at account@kvk.nl: allow roughly two working days for the quote and five for delivery, in Excel or CSV[6]. Before paying, the free KVK Bedrijventeller does one genuinely useful thing: it counts the businesses in a selection, so you can size the campaign[6].
One trap shows up in almost every brief: assuming the non-mailing indicator settles the question. KVK is explicit — the NMI means your address details may not be used for advertising post or door-to-door sales, and KVK adds that businesses can still contact you by email or phone[5]. So a file delivered without the NMI records is still essential for postal work, and gives you nothing on the phone. Article 11.7 governs the call, not the NMI.
Callable universe = businesses in the selection × share of legal entities.
Assumption to replace with your own numbers: 10,000 businesses in your selection × 24.0%[4] = 2,400 numbers callable without prior consent.
Six questions to settle before the first call
- What legal form does each row carry? BV, NV, stichting and vereniging pass; eenmanszaak, vof and maatschap require consent[1].
- Where is the proof of consent stored, and who produces it if a complaint lands? Paragraph 1 puts that burden on the sender[1].
- Is the calling number displayed? Hiding it is prohibited[1].
- Does every email carry the real identity of the party behind it and an address or number for opting out[1]?
- Was the email address published for receiving that kind of message, and does your subject match the purpose attached to it[1]?
- Who holds the conversation in Dutch, and from which reply address? That is not a legal rule; it is the difference between a meeting and a callback that never comes. Our channel comparison sets out which channel works for which decision-maker.
At CyberNovaLabs.io
We book B2B meetings in the Netherlands, Belgium, France and Luxembourg. The method is the same everywhere: qualification criteria are written down and agreed with you before the first call, the list is filtered on legal form before it is dialled, and every meeting comes with the origin of the data and the legal basis relied on. We work per meeting or on a flat fee, with no minimum term; pricing is on quotation. We commit to the work performed, never to a number of signatures.
To scope a Dutch campaign, see our B2B appointment setting page, or B2B appointment setting in Amsterdam if the Randstad is your target. You can also write to us for a first scoping call: send us your target segment and we will tell you, with the numbers, how many records are callable without consent.
Sources
- Telecommunicatiewet, art. 11.7 et 11.8 (texte en vigueur au 15/08/2026), wetten.overheid.nl
- Telecommunicatiewet, art. 15.4 (amendes administratives), wetten.overheid.nl
- ACM — Vanaf 1 juli strengere regels voor telemarketing
- CBS, tableau 81589NED « Bedrijven; bedrijfstak », période 2026 KW4 (mise à jour du 15/10/2026)
- KVK — Non-mailing indicator (NMI)
- KVK — Handelsregister adressen (sélections d'adresses du registre du commerce)
- CNIL — Prospection commerciale par téléphone (hors automate d'appel), 10/06/2026
- CNIL — La prospection commerciale par courrier électronique, SMS-MMS et automate d'appel, 10/06/2026
- Do Not Call Me — FAQ télémarketeurs (liste « Ne m'appelez plus », CDE art. VI.110-VI.115)
Qualified meetings, no lock-in.
Criteria in writing before launch, pay per meeting or monthly, stop with a simple email.
Read next
Critical PHP flaws: your website is affected (21/10/2026)
Two critical vulnerabilities in PHP, the engine under most small-business websites, allow unauthenticated remote code execution. Patches shipped on 21 October 2026. What to check this week, and what will never be fixed.
Read the article →October 22, 2026 · 9 min readNIS2 Netherlands: are software vendors and IT providers in scope?
Publishing software is not a listed category in Dutch law. Running a client's infrastructure, hosting it, monitoring it, is. Here is how to settle your own case in ten minutes, with the Dutch dates, the right regulator and the main-establishment rule that decides who inspects you.
Read the article →October 20, 2026 · 7 min readGuessed work emails: the CNIL B2B rules (16/10/2026)
On 16 October 2026 the CNIL framed the practice behind half the prospect lists in Europe: guessing a business email address. Legitimate interest still works, under three written conditions.
Read the article →October 20, 2026 · 9 min readNIS2 Luxembourg: are hotels and tourism in scope?
Hospitality appears in no annex of Luxembourg's NIS2 Act. Three obligations still reach you, and one of them already decides whether your corporate contracts get renewed.
Read the article →October 19, 2026 · 6 min readSmart glasses: the EDPB sets the GDPR rules (13/10/2026)
On 13 October 2026, the European Data Protection Board adopted its first statement on smart glasses. Here is what it changes for an SME that equips its teams with a camera, and for one that feeds those images to an AI.
Read the article →October 19, 2026 · 8 min readNIS2 Belgium: webshops, marketplaces and the CCB register
A Belgian webshop selling its own products is almost never in scope of NIS2. A marketplace is — as an important entity that had to register with the CCB by 18 December 2024, three months ahead of everyone else. What applies, what does not, and what your customers will ask for anyway.
Read the article →