On 20 August 2026, the Programming Council for Generic Digital Infrastructure (PGDI) introduced 2 new standards: the NLgov Profile for OpenID AuthZEN Authorisation API 1.0.0 and the Authorisation Decision Log 1.0.0. These standards enable government organisations to demonstrate transparency in authorisation decision-making.
This supports internal controls and compliance with laws and regulations, such as the General Data Protection Regulation (GDPR, or AVG in Dutch) and the Digital Government Act (Wdo). Standardising authorisation and its registration enables systems across different organisations to communicate seamlessly.
What do the standards do?
The NLgov Profile for OpenID AuthZEN Authorisation API 1.0.0 provides a standardised way for systems to make and exchange authorisation decisions. This allows government organisations to grant access to data and services consistently, considering roles, rights, and context. This standard is tailored to the Dutch government and aligns with international OpenID standards.
The Authorisation Decision Log 1.0.0 sets out how organisations record authorisation decisions, enabling the tracing of who gained access, when, and on what basis. A unique identifier links registrations when multiple organisations are involved in a process, providing a cohesive overview of authorisation decisions.
Further development and implementation
Logius manages these standards and supports their further development and implementation to ensure they meet the need for secure, transparent, and accountable digital services.
More information
If your government organisation wishes to apply these standards, please contact Logius for more information, support, and guidance.
