AMI security and privacy requirements released in Netherlands


Arnhem, The Netherlands — (METERING.COM) — November 1, 2010

The Dutch Association of Energy Network Operators (Netbeheer Nederland) has released privacy and security requirements for the country’s advanced metering infrastructure (AMI

The requirements, which were developed by the national Smart Meter Privacy and Security Working Group, are intended as a policy for compliance by the country’s grid operators.

In The Netherlands, the grid operators are responsible for installing and reading out smart meters and for offering services associated with market facilitation. Due to the extra information and communication technology in smart meters compared with traditional meters, new risks relating to privacy and security will be introduced, and it is the responsibility of the grid operators to ensure that these risks are manageable.

The aim of the requirements is to guarantee the reliable operation of the advanced metering infrastructure, and to protect the privacy of smart meter customers and comply with the statutory requirements relating to the protection of personal data (Dutch Personal Data Protection Act, PDPA).

The document defines 36 general requirements, 20 device-specific requirements and measures, 11 requirements and measures relating to data communication, and 23 requirements and measures specifically for the central system.

Among these grid operators must define, document and implement a privacy policy and security policy, and these must be assessed at least annually or more frequently if significant developments occur. The purposes for data collection and data processing must be clearly specified, and personally identifiable information, including metering data, must be processed in accordance with the specified purposes.

The grid operator also must ensure that a notification concerning the collection and processing of personally identifiable information collected by means of the smart meter is given to the Dutch Data Protection Authority.

The document states that it is clear that Dutch society attaches a great deal of importance to protecting privacy when it comes to smart meters.

According to the document the grid operators themselves will specify a timetable indicating when they will comply with the security requirements and measures.