When to file with the Dutch DPA about your energy supplier?
For privacy or data breaches (smart-meter detail data, sharing without consent, access refusal): the DPA. Not for tariff or billing complaints.
The Dutch DPA enforces GDPR and is competent for GDPR complaints about energy suppliers and grid operators. Complaints that genuinely belong with the DPA: (a) smart-meter detail data unlawfully requested or shared; (b) GDPR access request (art. 15) unanswered or badly answered within 1 month; (c) marketing consent for energy coach or app improperly collected; (d) data breach at the supplier not or late notified to you. File: klacht.autoriteitpersoonsgegevens.nl — free, 6-12 months. The DPA does NOT award individual damages — for damages: BW + civil court is the route, using the DPA ruling as evidence.