Skip to content
Case Law · Council of State EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

RVS - 202307578/1/A3

Council of State
Summary

Facts — The personal data of an individual was stored in the Fraud Detection System (FSV), an application used by the Dutch Tax Authority between 2012 and 2020 to record potential indicators of tax fraud. The Minister of Finance was the controller. The data subject submitted an access request under Article 15 GDPR. In particular, she requested information about the personal data processed, the purposes of the processing, the recipients of the data, its source and retention period, and any automated decision-making concerning her. The controller provided an overview of the personal data stored in the FSV and answered the data subject’s questions. The data subject objected to the decision, claiming that the controller had not disclosed all information relating to her registration. The controller rejected the objection. It explained that the data subject had been selected for a manual review of her tax return under Project 1043 and was consequently registered in the FSV. It also stated that the data was accessible only to employees of the Tax Authority and had not been disclosed to other organisations. The District Court of Amsterdam dismissed the data subject’s appeal. It held that the proceedings concerned compliance with the GDPR access request and not the lawfulness of her inclusion in the FSV or any alleged resulting damage. The data subject appealed this judgment before the Council of State. Holding — The Council of State dismissed the appeal and upheld the judgment of the District Court. The Court held that there was no evidence that the controller had incorrectly applied Article 15 GDPR. The controller had provided an overview of all personal data concerning the data subject processed in the FSV, explained the purposes of the processing and clarified the circumstances of her registration under Project 1043. Although the data subject suspected that the controller held additional information, she did not provide concrete evidence supporting this claim. The Court also found no indication that she had been classified as a fraudster or that her personal data had been disclosed to other organisations. The Court further clarified that the lawfulness of the data subject’s registration in the FSV, the deletion of her data and any claim for compensation fell outside the scope of the access proceedings. Consequently, the Court affirmed the contested judgment and did not award litigation costs.

How it connects

Full text

ECLI:NL:SURGE:2026:4575 Share pronunciation Agency Council of State Date of ruling August 5, 2026 Date of publication August 5, 2026 Case number 202307578/1/A3 Jurisdictions Administrative law Special features Appeal Summary By decision of August 5, 2022, the Minister of Finance granted [appellant]’s request for access to her personal data pursuant to Article 15 of the General Data Protection Regulation (GDPR). [Appellant]’s personal data were stored in the Fraud Signaling Provision (FSV) of the Tax and Customs Administration. The FSV was an application used by the Tax and Customs Administration from 2012 to February 27, 2020, for the purpose of recording potential indicators of tax fraud. [Appellant] has requested access to her personal data. Furthermore, she wishes to know the purpose for which her data were used, to whom the data were disclosed, the origin of the data, how long they have been stored by the Tax and Customs Administration, and the significance, underlying logic, and consequences of any automated decision-making by the Tax and Customs Administration. [Appellant] argues that she has not been provided with all the information regarding her registration in the FSV. Find places Rechtspraak.nl Enriched verdict Pronunciation 202307578/1/A3. Date of Judgment: August 5, 2026 DEPARTMENT ADMINISTRATIVE JUSTICE Judgment on the appeal of: [Appellant], residing at [address], Appellant, against the judgment of the District Court of Amsterdam dated November 3, 2023, in Case No. 23/2294, in the dispute between: [Appellant] and The Minister of Finance. Progress of the Proceedings By decision of August 5, 2022, the Minister granted [appellant’s] request for access to her personal data under Article 15 of the General Data Protection Regulation (GDPR). By decision of February 22, 2023, the Minister declared the objection raised by [appellant] to be unfounded. By judgment of November 3, 2023, the court declared the appeal filed by [appellant] against that decision to be unfounded. [Appellant] appealed this ruling. The Minister has submitted a written statement. The Section heard the case on July 3, 2026, at which [appellant], assisted by [authorized representative], and the Minister, represented by Mr. I.A. Huppertz and Mr. M. Clement, appeared. Considerations Introduction 1. The personal data of [appellant] were contained in the Fraud Signaling Provision (FSV) of the Tax and Customs Administration. The FSV was an application used by the Tax and Customs Administration from 2012 to February 27, 2020, for the purpose of recording potential indicators of tax fraud. [Appellant] has requested access to her personal data. Furthermore, [appellant] wishes to know the purpose for which the data were used, to whom the data were disclosed, the origin of the data, how long they were stored by the Tax and Customs Administration, and the significance, underlying logic, and consequences of any automated decision-making by the Tax and Customs Administration. Decision-Making 2. In the decision of August 5, 2022, the Minister responded to the questions posed by [appellant] and provided an overview of her personal data in the FSV. [appellant] objected to that decision. During the hearing regarding the objection, it became clear that [appellant] wished to be registered for the so-called securities investigation and wanted to know whether she was eligible for compensation. For this purpose, procedures other than those under the GDPR are available. The Minister therefore declared [appellant]’s objection unfounded. Court Ruling 3. The court has determined that the assessment of the decision concerns the application of the GDPR, and that the assessment does not pertain to the legality of the inclusion in the FSV. The court has not found that, in this case, the Minister failed to apply the GDPR properly. [Appellant] has not raised any specific grounds against the decision regarding her request for access. The court has no reason to assume that the list of personal data is incomplete. As for [appellant]’s claim that she has been disadvantaged by her inclusion in the FSV, the court notes that she has not been classified as a fraudster. She did not substantiate her claims. To apply for compensation, another procedure is available to the Minister. The court has declared [appellant’s] appeal unfounded. The Appeal 4. [Appellant] argues that she was not provided with all the information regarding her registration in the FSV. According to [appellant], she was registered in the FSV after it came to light in 2015 that she had attempted to deduct €50.00 too much in study costs from her income on her 2014 income tax return. She suspects that the Minister has additional information regarding her registration in the FSV, as this is a very severe measure and her FSV registration cannot be based solely on the wrongful deduction of a small amount of study costs. Furthermore, the consequences of the FSV registration for [appellant] are significant. For example, she is experiencing problems with healthcare providers, her training institution, her former employer, and the UWV. She also had to repay unexpected care allowance and housing allowance. She suspects that these problems stem from her registration with the FSV. 4.1. At the meeting with the division, the Minister stated, upon request, that [appellant] had been selected for a manual review of her tax return under Project 1043. That project was initially intended to detect systemic fraud involving educational expenses. Later, under that project code, tax returns with a high risk of inaccuracies were also reviewed to identify, where possible, errors in the return. Because [appellant] was selected for Project 1043, she is also registered in the FSV. Subsequently, the irregularity in the income tax return was discovered. According to the Minister, this was not the reason for the registration in the FSV. The Minister further stated during the hearing that only officials working at the Tax and Customs Administration had access to the registered personal data, and that this data had not been shared with other organizations. 4.2. The Section agrees with the court that it has not been established that the Minister incorrectly applied the GDPR in the decision of August 5, 2022. The Minister has provided an overview of all of [appellant]’s personal data that were processed in the FSV and the purposes for which they were processed. The Minister explained the meaning of Project 1043. As stated, [appellant] suspects that more personal data exists than the Minister has disclosed, but the Department sees no concrete evidence to support this. The overview provided by the Minister does not show that [appellant] has been identified as a fraudster and would therefore be registered in the FSV. The Department also has no concrete indications that the personal data has been shared with other organizations. 4.3. At the hearing before the Section, [appellant] also stated that she no longer wishes to be registered in the FSV. This case does not concern that matter. The Section notes, in a general sense, that the Minister pointed out at the hearing that the data from the FSV should not yet be deleted because it is necessary for investigations and the processing of claims for damages. Furthermore, the Minister has stated that the data is accessible only to a very limited group of employees and should not play a role in tasks to be carried out by the Tax and Customs Administration. 4.4. The argument is unsuccessful. Conclusion 5. The appeal is unfounded. The court’s ruling must be upheld. 6. The Minister is not required to reimburse any litigation costs. Decision The Administrative Law Division of the Council of State: Upholds the contested ruling. So decided by Mr. E.J. Daalder, President, and Mr. G.O. van Veldhuizen and Mr. J.A.W. Huijben, members, in the presence of Mr. A.E. Camperman, Registrar. signed Daalder President signed Camperman Registrar Pronounced in public on August 5, 2026 1000

Similar Content