UWV (Dutch employee insurance service provider) – €900,000 Fine (Netherlands, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Dutch employee insurance service provider, UWV, was fined for not using strong security measures on its employer portal. This lack of security put sensitive employee health data at risk. Companies must ensure their systems are secure to protect personal information.
What happened
UWV failed to implement multi-factor authentication on its online employer portal, leading to inadequate security.
Who was affected
Employees whose health data was accessed through the UWV's employer portal.
What the authority found
The Dutch data protection authority found that UWV violated GDPR by not securing its portal with adequate measures like multi-factor authentication.
Why this matters
This case underscores the necessity of strong security practices, such as multi-factor authentication, to protect sensitive data. It serves as a reminder for businesses to regularly update their security protocols to prevent unauthorized access.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 5 March 2026.
Processing notes: date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
As the UWV (the Dutch employee insurance service provider - 'Uitvoeringsinstituut Werknemersverzekeringen') did not use multi-factor authentication when accessing the online employer portal, security was inadequate. Employers and health and safety services were able to collect and display health data from employees in an absence system.
Related Enforcement Actions (1)
Other enforcement actions involving UWV (Dutch employee insurance service provider) in NL
Details
Fine Date
31 October 2019
Authority
Autoriteit Persoonsgegevens
Fine Amount
€900,000
Enforcement Tracker ID
ETid-107
About this data
Cite as: Cookie Fines. UWV (Dutch employee insurance service provider) - Netherlands (2019). Retrieved from cookiefines.eu
Last updated: