What Is the Healthcare Quality Complaints and Disputes Act?

The Healthcare Quality, Complaints and Disputes Act, known in the Netherlands by its Dutch abbreviation WKKGZ (Wet kwaliteit, klachten en geschillen zorg), is the central statute governing how healthcare providers must safeguard quality, handle patient complaints and resolve disputes. In force since 1 January 2016, it replaced the earlier Complaints Act for the Healthcare Sector (WKCZ) and consolidated scattered obligations into a single framework that covers hospitals, care homes, independent practitioners and virtually every other provider delivering care within the Dutch system.

On 1 January 2026 the Act’s compliance landscape shifted again when the Wet kwaliteitsregistraties zorg (Wkz) entered into force, imposing new duties on providers to supply data to quality registries, duties that bring fresh GDPR considerations for every organisation in the care sector. This guide explains the full scope of the healthcare quality, complaints and disputes act WKKGZ as it stands in 2026, walks through each core obligation and offers a practical compliance checklist for providers of every size.

TL;DR, What is the Healthcare Quality Complaints and Disputes Act (WKKGZ)?

The WKKGZ is a Dutch statute that obliges every healthcare provider to maintain good-quality care, operate a transparent complaints procedure, appoint an independent complaints officer and give clients access to an officially recognised disputes body. Since 1 January 2026 the Wkz amendments have added a further obligation: providers must supply specified data to quality registries designated by the Minister of Health, Welfare and Sport.

• Who is covered. All care providers as defined under the Act, hospitals, mental-health institutions, care homes, GPs, physiotherapists, midwives, dentists and other independent practitioners delivering care in the Netherlands.
• Core obligations. Systematic quality management; a complaints procedure with an independent complaints officer; affiliation with a recognised disputes body that can award binding compensation; incident-reporting duties to the Dutch Healthcare Inspectorate (IGJ); and, from 2026, data-supply duties to quality registries.
• Penalties for non-compliance. The IGJ can issue orders under administrative coercion, impose fines, suspend activities or, in extreme cases, shut down a care provider. Failure to affiliate with a disputes body is itself a sanctionable offence.

Scope and Purpose, Who and What the WKKGZ Covers

The WKKGZ applies to quality, complaints and disputes in the care sector across the Netherlands. Its purpose is twofold: to guarantee that providers deliver responsible care and to give clients a clear, accessible route to raise concerns. The Act covers providers whether they operate within the Health Insurance Act (Zvw), the Long Term Care Act (Wlz) or privately funded settings, the determining factor is whether an entity or individual delivers “care” as defined by the statute.

Key Definitions

• Care provider (zorgaanbieder). Any institution or individual who offers care, including hospitals, clinics, nursing homes, home-care organisations and sole practitioners such as GPs or physiotherapists.
• Client (cliënt). The person who receives care, or, in complaints and disputes matters, a representative or surviving family member.
• Complaints officer (klachtenfunctionaris). An independent person tasked with receiving complaints, mediating between client and provider, and advising the provider on systemic improvements.
• Disputes body (geschilleninstantie). An officially recognised external body, such as De Geschillencommissie Zorg, that can issue binding decisions and award compensation up to a statutory ceiling.

The Netherlands is consistently ranked among the best healthcare systems in Europe, yet the volume of quality, complaints and disputes in the care sector remains significant. Common complaint categories include communication failures, perceived treatment errors, waiting times and disagreements about care plans. The WKKGZ ensures every one of these complaints has a structured resolution pathway.

Core Provider Obligations Under the WKKGZ

Every care provider in the Netherlands must meet a set of non-negotiable requirements under the complaints procedure and the WKKGZ. Failure to implement any of these can trigger IGJ enforcement. The obligations fall into three clusters: quality management, complaints handling and disputes access.

Complaints Officer, Role, Qualifications and Record-Keeping

Providers must appoint at least one complaints officer. The officer’s core tasks are:

• Receiving and registering complaints from clients or their representatives.
• Offering free, impartial mediation between the client and the care provider, the officer does not take sides.
• Advising the provider’s board or management on patterns and systemic improvements identified through complaints data.
• Maintaining records of every complaint, including the outcome and follow-up actions.

The complaints officer must be independent. The WKKGZ does not prescribe specific qualifications, but the officer must be able to function without undue influence from the provider’s management. Smaller practices, a sole-practitioner GP surgery, for example, may share a complaints officer with other providers through a sector organisation or professional association.

When a complaint is received the provider must respond within a reasonable period. Government guidance indicates that six weeks is the benchmark, with a possible extension of four weeks if the provider notifies the client in writing. The response must address the substance of the complaint and explain what, if anything, the provider will change.

Disputes Body, Mandatory Access and Escalation

In addition to the internal complaints procedure, every provider must be affiliated with a recognised disputes body. If a client is dissatisfied with the outcome of the internal complaints process, they may escalate the matter to this body. Key features of the disputes route include:

• The disputes body can issue a binding decision.
• It may award financial compensation up to €25,000.
• Decisions are enforceable and cannot be overturned by the provider unilaterally.
• The disputes body publishes anonymised decisions, contributing to sector-wide learning.

Providers that fail to affiliate with a disputes body violate the Act and face enforcement action from the IGJ. De Geschillencommissie Zorg is the most widely used disputes body in the Dutch care sector and offers specific commissions for hospitals, mental-health care, nursing homes and independent practitioners.

Wkz 2026 Amendments, New Duties to Supply Quality Registry Data

From 1 January 2026, the Wet kwaliteitsregistraties zorg (Wkz) entered into force. The Wkz amends the WKKGZ by introducing a statutory obligation for providers to supply data to quality registries designated by the Minister of Health, Welfare and Sport. This marks a significant expansion of the healthcare quality, complaints and disputes act WKKGZ’s compliance footprint and creates new operational and legal requirements that every provider must address.

What Data Must Be Shared, and to Whom

Under the Wkz, providers are required to furnish data that quality registries need to evaluate, benchmark and improve the quality of care. The specific data sets are determined per registry designation; they typically include clinical outcome indicators, treatment volumes, complication rates and patient-reported outcome measures (PROMs). Registries are designated by ministerial order and may cover surgical specialisms, chronic-care programmes, oncology outcomes and other defined domains.

The table below illustrates how the data-sharing framework operates in practice:

Legal Basis and GDPR Interplay

The Wkz provides a statutory legal basis for data processing, which means providers can rely on Article 6(1)(c) GDPR (compliance with a legal obligation) and, for special-category health data, on Article 9(2)(h) or (i) GDPR (healthcare purposes or public-interest grounds). However, the existence of a legal basis does not relieve providers of their broader GDPR duties:

• Data Protection Impact Assessment (DPIA). Sharing patient-level health data with external registries constitutes high-risk processing. A DPIA is mandatory before data flows commence.
• Data Processing Agreement (DPA). Where the quality registry processes data on behalf of, or jointly with, the provider, a DPA must be in place specifying purposes, categories of data, retention, security measures and sub-processor arrangements.
• Purpose limitation and data minimisation. Providers may only supply the data sets specified in the relevant ministerial designation. Sharing additional patient information beyond the designation is not covered by the Wkz legal basis.
• Patient information. Although consent is not the primary lawful basis, providers should inform patients that their data may be supplied to quality registries and explain the purpose, transparency obligations under Articles 13–14 GDPR still apply.

Data Protection and Patient Confidentiality, Balancing Wkz Registry Duties with GDPR

The Dutch Government has published specific guidance on data protection and the healthcare quality, complaints and disputes act, recognising that the interplay between the WKKGZ, the Wkz and GDPR creates a multi-layered compliance challenge. Providers must navigate medical confidentiality obligations under the Medical Treatment Agreement Act (WGBO), the GDPR, and the new Wkz registry duties simultaneously.

Practical Steps for Data Protection Officers

• Conduct a DPIA. Map every data flow from patient records to external registries. Assess necessity, proportionality and risk, document mitigating measures.
• Execute a DPA with each quality registry. Specify data categories, retention periods, security standards and audit rights. Ensure the DPA aligns with the ministerial designation.
• Pseudonymise at the earliest stage possible. Where the registry’s analytical purpose can be achieved without direct patient identifiers, the provider must pseudonymise data before transmission.
• Maintain access logs. Record who accessed patient data for registry reporting, when and why, these logs support accountability under GDPR Article 5(2).
• Minimise data. Supply only what the designation requires. Strip out fields that are not within scope.
• Update privacy notices. Inform patients about registry data sharing, the legal basis (legal obligation / public interest) and their rights, including the right to object and the limitations of that right where a legal obligation applies.
• Train staff. Ensure clinical and administrative staff understand which data must be shared, the workflow for extraction and submission, and the consequences of over- or under-sharing.

Disputes Resolution Pathways, Internal, External, Disciplinary and Civil Options

If a client has a complaint about healthcare, the WKKGZ provides multiple pathways. The first step is always the provider’s internal complaints procedure, but several escalation routes exist beyond it. Understanding these options is essential both for providers designing their complaints workflows and for clients assessing their choices.

Timelines and Remedies by Route

Industry observers expect the disputes-body route to remain the most common escalation pathway for patients, as it is faster and cheaper than civil litigation and can still yield meaningful compensation. Civil proceedings remain an option where damages exceed the €25,000 ceiling or where the client seeks injunctive relief.

Enforcement, Sanctions and IGJ Oversight

The Dutch Healthcare Inspectorate (Inspectie Gezondheidszorg en Jeugd, IGJ) is the primary enforcement authority for the WKKGZ. The IGJ can act on its own initiative, in response to incident reports filed by providers themselves, or following signals from clients, other authorities or media coverage.

Enforcement measures available to the IGJ include:

• Orders under administrative coercion (last onder bestuursdwang). The IGJ can require a provider to take specific corrective action within a set timeframe.
• Penalty payments (last onder dwangsom). Periodic fines for continued non-compliance.
• Administrative fines (bestuurlijke boete). For specified offences, including failure to maintain a complaints procedure or failure to affiliate with a disputes body.
• Suspension or cessation orders. In cases of immediate patient-safety risk, the IGJ can order partial or full suspension of care delivery.

Reputational consequences are equally significant. IGJ inspection reports are published and freely accessible, a negative report can affect a provider’s contracts with health insurers, its accreditation status and public trust.

Practical Compliance Checklist and Governance Steps for Providers

Meeting the WKKGZ requirements in the Netherlands in 2026 demands a structured governance approach. The following step-by-step checklist guides providers from board level to frontline implementation.

1. Governance assignment. Designate a board member or senior manager as the accountable owner for WKKGZ and Wkz compliance.
2. Policy documentation. Draft and adopt a written complaints policy that describes the procedure, timelines, role of the complaints officer and escalation to the disputes body.
3. Appoint a complaints officer. Ensure independence, the officer should not report to operational management on complaint outcomes. Document the appointment formally.
4. Affiliate with a disputes body. Register with a recognised disputes body (e.g., De Geschillencommissie Zorg) and confirm affiliation in writing to clients.
5. Client information duties. Inform clients, in writing or via the website, about the complaints procedure, the complaints officer’s contact details and how to access the disputes body.
6. Incident-reporting protocol. Implement a process for identifying and reporting incidents to the IGJ as required under the WKKGZ.
7. Registry data mapping (Wkz). Identify which quality registries apply to your organisation. Map the required data fields to your clinical information systems.
8. DPIA and DPA. Complete a Data Protection Impact Assessment for each registry data flow. Execute Data Processing Agreements with each registry.
9. Staff training. Train clinical, administrative and data-management staff on complaints handling, incident reporting and registry data-submission workflows.
10. Annual review. Review complaints data, registry submissions and policy documents at least annually. Report findings to the board and adjust processes as needed.

Template Roles and Responsibilities

Reporting Obligations by Entity Type

Timeline of Key Legislative Dates and Milestones

Conclusion and Next Steps

Understanding what is the healthcare quality complaints and disputes act, and how the 2026 Wkz amendments have expanded its scope, is now a frontline compliance priority for every care provider operating in the Netherlands. The core duties remain: deliver responsible care, maintain an accessible complaints procedure, appoint an independent complaints officer and affiliate with a recognised disputes body. On top of these, the Wkz requires providers to map quality registries, complete DPIAs, execute DPAs and build data-submission workflows that satisfy both the ministerial designations and the GDPR.

Providers that have not yet reviewed their WKKGZ and Wkz compliance position should do so without delay. Industry observers expect IGJ enforcement attention to increase as the Wkz bedding-in period progresses and the first round of designated registries begins collecting data at scale. Early preparation, including a formal compliance audit, reduces both regulatory risk and reputational exposure. For tailored guidance on WKKGZ obligations and the new registry data-sharing duties, find a Netherlands healthcare lawyer through the Global Law Experts directory.

Sources

1. Government.nl, Healthcare Quality, Complaints and Disputes Act (WKKGZ)
2. Government.nl, Data Protection and the Healthcare Quality, Complaints and Disputes Act
3. Business.gov.nl, Quality, Complaints and Disputes in the Care Sector (WKKGZ)
4. Wetten.overheid.nl, Official Law Texts (Wkkgz and Wkz)
5. De Geschillencommissie Zorg, The WKKGZ for Care Providers
6. Universiteit van Amsterdam, Evaluation of the Healthcare Quality, Complaints and Disputes Act
7. PubMed, Academic Commentary on WKKGZ
8. IGJ (Dutch Healthcare Inspectorate), Enforcement Guidance
9. European Data Protection Board (EDPB), GDPR Guidance