The Netherlands’ data protection authority, Autoriteit Persoonsgegevens, fined the Tax and Customs Administration 2.75 million euros for data processing violations under the EU General Data Protection Regulation. The AP deemed the administration's processing of dual nationality information belonging to applicants for childcare allowance "unlawful, discriminatory and therefore improper," noting the administration should have deleted the data according to data minimization principles. AP chairman Aleid Wolfsen said the case is an example of how "unlawful processing with an algorithm has violated the right to non-discrimination."
Dutch DPA fines tax authority 2.75M euros
Related stories
Notes from the Asia-Pacific region: Looking back on an exceptional 2025 and the year to come
Notes from the IAPP Europe: Another piece of the EU Digital Package puzzle — the Data Union Strategy
Gaps in website opt-out functionality under the microscope in privacy enforcement
The case for differential privacy in the age of agentic AI
Santa Fe 4.0: la reforma constitucional que redefine derechos, tecnología y ciudadanía digital en Argentina
