Dutch Minister of Finance

€2,750,000

Insufficient legal basis for data processing

Ημερομηνία απόφασης

25 Νοεμβρίου 2021

Αρχή

Dutch Supervisory Authority for Data Protection (AP)

NL

Τομέας

Public Sector and Education

Χώρα

NL

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Dutch DPA (AP) has fined the Minister of Finance EUR 2,75 million. In the context of childcare benefit applications, tax offices had processed data on the dual nationality of applicants for several years. However, the DPA found that the data on dual nationality of Dutch citizens would not have been necessary when assessing an application for childcare benefits. The said data had also been processed for the purpose of combating organized fraud and for automatic classification in the authority's risk system. However, even for these purposes, the processing would not have been necessary. For this reason, the tax and customs administration should have deleted the data on dual nationality as early as January 2014. Nevertheless, as of May 2018, the dual citizenship data of a total of 1,4 million people were still registered in the systems of the tax and customs administration. The DPA therefore found that the data had been unlawfully processed due to the lack of a valid legal basis. Furthermore the DPA stated that the data subjects had been discriminated against on the basis of their nationality.

Νομικές παραπομπές

Art. 5 (1)Art. 6 (1)Art. 8

Θέματα & Παραβάσεις

Insufficient legal basis for data processing

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.