This document concerns the 2025 annual plan of the Autoriteit Persoonsgegevens AP), which sets out the supervisory strategy for the Tax and Customs Administration. The supervisory authority is focusing on new projects such as investigating the Risk Analysis Model for unlawful data linking and tackling institutional racism in automated selection processes. In addition, the AP is checking whether the tax authorities comply with the legal obligation to maintain an up-to-date processing register and whether the internal culture is sufficiently focused on fundamental rights. Ongoing issues, including the use of the BSN in payment details and the handling of requests for access, will also remain under increased supervision. Finally, the letter emphasizes the need for improved security measures and stronger central control in the area of privacy within the government agency.
