The Netherlands’ data protection authority, Autoriteit Persoonsgegevens, fined the Tax and Customs Administration 2.75 million euros for data processing violations under the EU General Data Protection Regulation. The AP deemed the administration's processing of dual nationality information belonging to applicants for childcare allowance "unlawful, discriminatory and therefore improper," noting the administration should have deleted the data according to data minimization principles. AP chairman Aleid Wolfsen said the case is an example of how "unlawful processing with an algorithm has violated the right to non-discrimination."
Dutch DPA fines tax authority 2.75M euros
Related stories
Home sweet home or location, location, location: The best place for your company's privacy office
Transparency, good data and documentation: How HR can navigate the EU AI Act
Mind matters: Shaping the future of privacy in the age of neurotechnology
A view from DC: The FTC's next priorities
Notes from the IAPP Canada: CPS25 highlights privacy, AI, cybersecurity evolution