Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

UWV (Dutch employee insurance service provider) – €450,000 Fine (Netherlands, 2021)

€450,000Autoriteit Persoonsgegevens31 May 2021Netherlands
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

UWV was fined for failing to secure personal information sent through their online messaging system, leading to multiple data leaks. Over 15,000 individuals had their personal data exposed due to these security lapses. This case emphasizes the importance of safeguarding user information in online communications.

What happened

UWV was fined for not properly securing group messages sent through the 'My Workbook' environment.

Who was affected

More than 15,000 job seekers who used the UWV website were affected by the data leaks.

What the authority found

The Dutch Data Protection Authority found that UWV did not meet GDPR's security requirements.

Why this matters

This fine highlights the critical need for organizations to implement robust security measures for handling personal data. It serves as a warning that inadequate protection can lead to significant financial penalties.

Recorded legal citations
Automatically processed
Art. 32 GDPR
View original scraped data
Art. 32 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 6 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Dutch DPA (AP) has fined UWV (the Dutch employee insurance service provider - 'Uitvoeringsinstituut Werknemersverzekeringen) EUR 450,000. The UWV had not properly secured the sending of group messages via the 'My Workbook' environment. This is a personal environment on the UWV website where job seekers have contact with the UWV. As a result, there were multiple data leaks of personal information, including health information, from a total of more than 15,000 individuals.

Related Enforcement Actions (1)

Other enforcement actions involving UWV (Dutch employee insurance service provider) in NL

Details

Fine Date

31 May 2021

Authority

Autoriteit Persoonsgegevens

Fine Amount

€450,000

Enforcement Tracker ID

ETid-751

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. UWV (Dutch employee insurance service provider) - Netherlands (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: