The Decree on Processing of Personal Data in the Generic Digital Infrastructure (Besluit verwerking persoonsgegevens generieke digitale infrastructuur) describes the processing of personal data in detail and in full.
Rules on the operation, security and reliability of DigiD and DigiD Authorisation are included in the Regulation on GDI Facilities (Regeling voorzieningen GDI).