Tax authorities do too little to protect citizens' privacy

The Dutch Tax Authority fails to meet requirements in ten out of twelve areas according to a report by the Data Protection Authority. Issues include inadequate logging systems and insufficient justification for automated selection criteria, which could lead to discrimination. The authority must ensure human oversight of algorithms affecting individuals and comply better with privacy laws. Additionally, it needs to stop processing citizen service numbers in payments to protect personal data. The Tax Authority is expected to cease this practice by the end of the year, but further improvements are still needed.