Since April 2021, the Radiocommunications Agency has been investigating KPN. This is in response to reports in the Volkskrant of April 17. We hereby provide an update on the progress of our investigation.
The Agency's investigation focuses on the possibility of unwanted access to the facility at KPN that enables wiretapping on the basis of a court order. In particular, the role of (the employees of) suppliers is being examined. All systems and processes that contribute to the interception facility at KPN, including the core of the mobile network, fall within the focus of the investigation.
To answer the question of whether unwanted access to the KPN tap facility is possible today, the Radiocommunications Agency analyzed relevant documentation and examined systems. Inspections have also since been carried out at several data centers. This allowed the investigation questions to be further sharpened and the required depth of investigation to be determined. KPN is cooperating fully and in all respects with the investigation.
In the coming months, the Radiocommunications Agency will subject such aspects as physical security, logical access security, logging and monitoring to further investigation. This will take several months. The investigation is expected to be completed by mid-September 2021.
The security and integrity of telecommunications networks are vital to our society and our economy. In recent years, under the leadership of the Taskforce on Economic Security, work has been done on legal possibilities to mitigate risks. Among other things, the Telecommunications Security and Integrity Decree and the subsequent decrees and ministerial regulations provide a legal basis to better manage risks associated with unauthorized access by third parties.
