ā’¾Machine translations by Deepl

Banks' access to Basic Personal Records is undesirable

Privacy First participation in consultationĀ 

The Dutch Banking Association (NVB) has asked the government for access to the Basic Registration of Persons (BRP) in connection with the customer due diligence they are required to carry out under the anti-money laundering legislation. In response, the government is proposing to grant Dutch banks access to the BRP through the BRP Decree. Privacy First Foundation expressed its objections to this in an internet consultation.

Privacy First participated in the consultation and stated that the requested access for banks is neither necessary nor undesirable. Not necessary because banks have to verify the customer's identity on the basis of passport or identity card when entering into the agreement with the customer, where a large part of the BRP data is already obtained. Furthermore, it is unnecessary because the BRP does not contain various data. It is undesirable because it restricts citizens' own control over their data and increases the risks of identity fraud if the BRP is accessed off-person.

You can read more in our full consultation response (pdf).