Dutch DPA fines the tax authorities €3.7 million
The Dutch Data Protection Authority (AP) has imposed a fine of 3.7 million euros on the tax authorities because of the years of illegal processing of personal data in the Fraud Signaling Facility (FSV). That was a blacklist on which the Tax and Customs Administration kept records of fraud. With often major consequences for people who were wrongly on the list.
Tax and Customs Administration had no legal basis for processing the personal data on the list. Also, the personal data was often incorrect. As a result, people were wrongly registered as possible fraudsters. Furthermore, the security of the list was not in order. And the internal privacy supervisor of the Tax and Customs Administration was not involved in setting up the list in time.
Source: Fine by the tax authorities for blacklisting FSV | Personal Data Authority
