Dutch Tax authorities fined 2.75 million euro for discriminatory and illegal data processing
The Dutch Data Protection Authority (AP) imposed a fine of 2.75 million euros on the tax authorities because for years the Tax and Customs Administration has processed the (dual) nationality of applicants for childcare allowance in an unlawful, discriminatory and therefore improper manner. These are serious violations of the privacy law, the General Data Protection Regulation (GDPR).
The tax authorities should have deleted the data on the dual nationality of Dutch citizens in January 2014.
The dual nationality of Dutch nationals does not play a role in assessing an application for childcare allowance. Nevertheless, the Tax and Customs Administration kept and used this information. In addition, the tax authorities processed the nationality of applicants to combat organized fraud. While the data was not necessary for this.
Source: Tax authorities fine for discriminatory and illegal working methods | Personal Data Authority