- Enforcing jurisdiction
- Netherlands · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Dutch Foreign Ministry – €565,000 Fine (Netherlands, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Dutch data protection authority fined the Dutch Foreign Ministry EUR 565,000 for serious security flaws in its visa application system. The Ministry failed to protect sensitive personal data, putting many applicants at risk. This case stresses the importance of strong data security measures.
What happened
The Dutch Foreign Ministry was fined for significant security deficiencies in its National Visa Information System.
Who was affected
Visa applicants, whose sensitive personal information was inadequately protected, were affected by the security issues.
What the authority found
The authority found that the Ministry acted with gross negligence by not addressing known security flaws in the visa system.
Why this matters
This ruling serves as a warning to government agencies and businesses about the need for robust data security. Organizations must prioritize protecting personal data to avoid severe penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: articles corrected, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Dutch DPA has imposed a fine of EUR 565,000 on the Dutch Foreign Ministry. As part of its investigation, the DPA found that the National Visa Information System (NVIS) suffered from significant security deficiencies. This is particularly serious as the Foreign Ministry has processed an average of 530,000 visa applications per year over the last three years and the personal data processed in the course of the applications was therefore inadequately secured. The data included sensitive information such as fingerprints, name, address, place of residence, country of birth, purpose of travel and nationality. Due to the inadequate security measures, it would have been possible for unauthorized persons to access the data. According to DPA, the Foreign Ministry had been aware of the security flaws in the visa system for some time. Despite this knowledge, the Ministry did not adjust the security measures in time. For this reason, the DPA finds that the Ministry acted with gross negligence. The DPA also found that the Foreign Ministry did not adequately inform individuals who applied for visas that their personal information would be shared with other parties.
Related Enforcement Actions (0)
No other enforcement actions found for Dutch Foreign Ministry in NL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
24 February 2022
Authority
Autoriteit Persoonsgegevens
Fine Amount
€565,000
Enforcement Tracker ID
ETid-1119
About this data
Cite as: Cookie Fines. Dutch Foreign Ministry - Netherlands (2022). Retrieved from cookiefines.eu
Last updated: