Outgoing State Secretary for Finance Heijnen recently informed the House of Representatives that the Tax and Customs Administration will not stop using the Customer Supervision Model (KTA) until 2028.
According to the Autoriteit Persoonsgegevens, the Tax and Customs Administration is violating the GDPR in several respects with the KTA. For example, there is only one role for all employees who have access. The DPA had considered shutting down the system immediately but did not do so because this would have had far-reaching consequences for the Tax and Customs Administration's performance of its public duties.
"The phasing out of KTA will continue until 2028. That is a long time, given the risks that the system poses to citizens' fundamental rights," said the AP in response to the minister's letter. Therefore, at the end of next year or in early 2027, the supervisory authority will investigate whether the measures introduced have sufficiently reduced the risks. If this is not the case, the AP does not rule out a processing ban as of December 2027.
Clickherefor the letter from State Secretary Heijnen of Finance to the House of Representatives.
