Can you handle AVG + Telecommunicatiewet + PSD2 SCA for my NL Magento store?

Yes, this is the most under-estimated Amsterdam-rebuild scope. AVG (Algemene Verordening Gegevensbescherming) is the Dutch implementation of EU GDPR, regulated by Autoriteit Persoonsgegevens (AP), one of the most active GDPR enforcement bodies in Europe. Telecommunicatiewet is stricter than EU ePrivacy on cookies: explicit opt-in required, no "implied consent" via continued browsing, no pre-ticked boxes. PSD2 SCA (Strong Customer Authentication) is the EU-wide rule, handled natively by Adyen + Mollie, but you still need 3DS2 fallback for cards. We deploy: Cookiebot or Klaro CMP per-storefront-view with AP-compliant explicit opt-in, DSAR automation within 30 days (AVG mandates this), PSD2 SCA exemption flows for low-risk and recurring txns, plus PEPPOL e-invoicing for government suppliers and Wet open overheid transparency rules if you sell to NL gov.