Security Monitoring Nederland 2026: AVG & NIS2 Compliance...

import { auth } from "@clerk/nextjs/server";
import { db } from "@/lib/db";

export async function GET() {
  const { userId } = await auth();
  if (!userId) return new Response("Unauthorized", { status: 401 });
  
  // Collect all user data for GDPR export
  const userData = await db.query.users.findFirst({
    where: (users, { eq }) => eq(users.id, userId),
    with: {
      orders: true,
      activityLogs: true,
      consents: true,
    },
  });
  
  const export_data = {
    export_date: new Date().toISOString(),
    user_id: userId,
    personal_data: {
      email: userData.email,
      name: userData.name,
      created_at: userData.createdAt,
    },
    orders: userData.orders,
    activity_logs: userData.activityLogs,
    consents: userData.consents,
  };
  
  return Response.json(export_data);
}

interface SecurityIncident {
  severity: "low" | "medium" | "high" | "critical";
  type: string;
  description: string;
  affected_systems: string[];
  timestamp: Date;
  reported_by: string;
}

export async function logNIS2Incident(incident: SecurityIncident) {
  // Store incident in database
  await db.insert(securityIncidents).values(incident);
  
  // NIS2 requires reporting within 24-72 hours for critical incidents
  if (incident.severity === "critical") {
    await notifyNCSC(incident);
    await notifyManagement(incident);
  }
  
  // Create audit trail
  await createAuditTrail(incident);
}

import { db } from "@/lib/db";

async function cleanupOldData() {
  const ONE_YEAR = 365 * 24 * 60 * 60 * 1000;
  const TWO_YEARS = 2 * ONE_YEAR;
  
  // Delete logs older than 1 year
  await db.delete(auditLogs)
    .where(lt(auditLogs.createdAt, new Date(Date.now() - ONE_YEAR)));
  
  // Anonymize inactive users after 2 years
  await db.update(users)
    .set({ 
      email: null,
      name: "Anonymous User",
      phone: null 
    })
    .where(lt(users.lastActive, new Date(Date.now() - TWO_YEARS)));
}

cleanupOldData();

"use client";

import { useState, useEffect } from "react";

export function CookieConsent() {
  const [showBanner, setShowBanner] = useState(false);
  
  useEffect(() => {
    const consent = localStorage.getItem("cookie-consent");
    if (!consent) setShowBanner(true);
  }, []);
  
  const acceptCookies = () => {
    localStorage.setItem("cookie-consent", "accepted");
    localStorage.setItem("consent-date", new Date().toISOString());
    setShowBanner(false);
  };
  
  if (!showBanner) return null;
  
  return (
    

      
We gebruiken cookies voor analytics en functionaliteit.
      Accepteren
    
  );
}