The Netherlands’ data protection authority, Autoriteit Persoonsgegevens, fined the Tax and Customs Administration 2.75 million euros for data processing violations under the EU General Data Protection Regulation. The AP deemed the administration's processing of dual nationality information belonging to applicants for childcare allowance "unlawful, discriminatory and therefore improper," noting the administration should have deleted the data according to data minimization principles. AP chairman Aleid Wolfsen said the case is an example of how "unlawful processing with an algorithm has violated the right to non-discrimination."
Dutch DPA fines tax authority 2.75M euros
Related stories
Notes from the IAPP Canada: CPS25 zeroes in on the issues that matter most
A view from DC: An updated NIST Privacy Framework
Handsets, headsets and hyperscreens: Emerging ideas for immersive experiences and the importance of governance by design
Notes from the Asia-Pacific region: India strides ahead on the digital front
New developments in global adequacy capabilities