Netherlands Co-Determination · WOR Art. 27

Works Council (Ondernemingsraad) Readiness

Everything Dutch HR leaders, Legal Counsel, and Works Council members need: Article 27 WOR co-determination assessment, Data Protection Impact Assessment (DPIA) summary, and ready-to-use submission text.

Copy OR Submission Template View GDPR DPA (Dutch Appendix)

No Live Monitoring

Supervisors cannot listen in to sessions and no audio is stored. Organization admins can view scores and progress reports, so agree their scope with your Works Council (WOR Art. 27(1)(k)).

Zero Voice Retention

Live speech audio is processed in memory for the conversation only. Dehurdle never writes voice recordings or acoustic voiceprints to disk.

Strictly Formative Coaching

Scores are developmental coaching signals. Our Terms of Service prohibit using them as the sole basis for disciplinary or termination decisions.

Legal Co-Determination Framework

How Dehurdle Relates to Article 27 WOR

Under Article 27, paragraph 1, sub k of the Dutch Works Councils Act (Wet op de ondernemingsraden - WOR), an employer requires prior consent (*instemmingsrecht*) of the Works Council for regulations concerning systems aimed at or suitable for monitoring attendance, behavior, or performance of employees. Here is how Dehurdle compares with traditional monitoring tools:

Evaluation Dimension	Traditional Monitoring / Surveillance	Dehurdle Capability Simulator	WOR Art. 27 Implications
Real-time Voice Processing	Stores employee voice calls, creates biometric voiceprints, enables live supervisor wiretapping.	Zero Voice Retention. Audio processed in ephemeral RAM and instantly discarded. Zero audio files or voiceprints stored.	Removes voice-recording and live-listening concerns.
Practice Session Visibility	Managers track minute-by-minute desktop activity, mic status, or force continuous recording.	No real-time listening by supervisors or colleagues. Organization admins can view scores and progress reports for assigned training.	Agree with the Works Council which reports are used, by whom, and for what purpose.
Scorecards & Evaluations	Automated ranking used for stack ranking, performance improvement plans (PIPs), or termination.	Formative coaching recommendations against standardized competencies. Our Terms of Service prohibit using them as the sole basis for employment decisions.	Supports GDPR Art. 22 safeguards against solely automated decisions.
Data Ownership & Portability	Employer owns all recordings permanently; employee cannot request erasure.	Full GDPR compliance. Employees can export their reports or request complete account erasure anytime.	Supports data subject rights under GDPR and the UAVG.

Recommendation for Dutch Employers: Because organization admins can view scores and progress reports, Dehurdle may fall under the consent right in Art. 27(1)(k) WOR. Present the pre-filled packet below to your Works Council before rollout and confirm the position with your own legal counsel.

Technical Data Architecture

Zero Voice Retention: Technical Blueprint

Works Councils often raise valid concerns regarding employee voice surveillance and acoustic voiceprints. Dehurdle is architected from the ground up to prevent voice storage:

Step 1 · Streaming

Encrypted WebSockets

Audio streams directly over TLS 1.3 WebSockets. No audio is ever written to local client disks or intermediary web servers.

Step 2 · Processing

Volatile RAM Only

Google Gemini Live processes the audio stream in real time to generate the persona's response.

Step 3 · Immediate Purge

No Audio Written to Disk

Audio buffers are released after each turn. Dehurdle does not store voice recordings.

Step 4 · Scorecard

Structured Insights

Only the text transcript and structured competency scorecard are stored in Dehurdle's database.

DPIA Executive Summary

Pre-filled Data Protection Impact Assessment (DPIA)

A pre-filled DPIA summary to support your own assessment under Article 35 GDPR and the guidelines of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

1. Systematic Description of Processing

Employees engage in voluntary or structured AI conversational simulations to refine spoken negotiation, customer communication, and leadership skills. Input audio is streamed via TLS 1.3 WebSockets to ephemeral compute instances, analyzed by Gemini models, and converted to structured competency feedback.

2. Assessment of Necessity & Proportionality

Traditional practice requires expensive 1-on-1 human actors or exposes trainees to live customer churn during on-the-job training. Dehurdle provides safe simulated practice with minimal data footprint: zero voice storage, no biometric identification, and automated transcript retention controls.

3. Lawful Basis under GDPR & Dutch UAVG

Processed under GDPR Article 6(1)(f) (Legitimate interest of employer and employee in workplace capability development) and Article 6(1)(b) (Performance of training contracts). No special category biometric data (Art. 9) is processed or retained.

4. Risk Mitigation Measures in Place

Encryption in transit (TLS), enterprise SSO access controls, configurable transcript retention, and a 72-hour breach notification commitment (see DPA).

Ready-to-Use Packet

Works Council Submission Template

Copy and adapt this formal proposal for your organization's Works Council (*Ondernemingsraad*).

AANVRAAG TOT ADVIEZEN / INSTEMMING ONDERNEMINGSRAAD (WOR ART. 27)

Betreft: Invoering van Dehurdle als individueel ontwikkel- en trainingsplatform voor gespreksvaardigheden

Geachte leden van de Ondernemingsraad,

De directie legt hierbij het voornemen voor tot het beschikbaar stellen van Dehurdle voor medewerkers binnen onze organisatie.

1. Doel en Aard van het Systeem
Dehurdle is een AI-gestuurde gesprekssimulator die medewerkers in staat stelt om in een veilige, besloten omgeving professionele gesprekken te oefenen (zoals klantgesprekken, onderhandelingen en leiderschapssituaties). De directie zet het platform uitsluitend in als ontwikkel- en leermiddel (formatieve training) en nadrukkelijk niet als beoordelings- of controle-instrument. Omdat beheerders binnen de organisatie scores en voortgangsrapportages kunnen inzien, legt de directie de invoering voor ter instemming op grond van artikel 27 lid 1 onder k van de Wet op de ondernemingsraden (WOR).

2. Privacy en Gegevensbescherming (Zero Voice Retention)
- Geen opslag van stemopnamen: Gesproken audio wordt uitsluitend 'in-memory' (vluchtig RAM) verwerkt via versleutelde WebSockets (TLS 1.3). Er worden géén audiobestanden, opnamen of biometrische stemafdrukken opgeslagen op schijf.
- Autonomie van de medewerker: Oefensessies zijn individueel. Leidinggevenden kunnen niet live meeluisteren en hebben geen toegang tot audio. Beheerders kunnen wel scores en voortgangsrapportages van toegewezen trainingen inzien; de reikwijdte en het doel daarvan worden met de OR afgestemd.
- AVG/GDPR-waarborgen: Verwerking onder een verwerkersovereenkomst (DPA) inclusief Standard Contractual Clauses (SCC's) voor doorgifte buiten de EER, en volledige rechten van inzage en gegevensverwijdering.

3. Niet-bindende Scores en Geen Geautomatiseerde Besluitvorming
De door AI gegenereerde feedback en competentiescores zijn uitsluitend bedoeld voor persoonlijke reflectie en coaching van de medewerker. Deze gegevens mogen noch direct noch indirect worden aangewend voor arbeidsrechtelijke consequenties, disciplinaire maatregelen, promotie- of ontslagbeslissingen (conform artikel 22 AVG en de EU AI Act).

4. Verzoek aan de Ondernemingsraad
De directie verzoekt de Ondernemingsraad om positief advies / instemming te verlenen aan de uitrol van dit ontwikkelprogramma onder bovengenoemde waarborgen.

Hoogachtend,
Directie / HR Directie

Need custom support for your Works Council presentation?

We can join your OR briefing session to walk through the technical architecture, GDPR data flows, and co-determination questions.

Contact reach@dehurdle.com