Image Credentials: Image Title: Dutch Intelligence Agencies Criticised Over Privacy Breaches in Large Scale Data Processing. Source: (chatgpt.com) Date: June 2026. Attribution: This image was created using AI-generated imagery (chatgpt.com) by Open Chronicle and does not depict a real-world scene.
By Open Chronicle News Desk with Agencies
Dutch intelligence oversight authorities have accused the country’s intelligence services of repeatedly failing to comply with privacy laws when handling massive databases containing sensitive personal information, raising fresh concerns about oversight, data protection and the growing use of artificial intelligence within national security operations.
The findings were published by the Commission for the Oversight of Intelligence and Security Services (CTIVD), which concluded that both the General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD) have not consistently followed legal requirements governing the use of large-scale datasets.
According to the watchdog, an increasing number of departments within both agencies now rely on so-called “bulk datasets” containing millions of records, yet there is no central system ensuring that the information is managed in accordance with the law.
The investigation also found that some employees were granted access to highly sensitive information without possessing the necessary security authorisation.
Massive Databases Raise Privacy Concerns
Bulk datasets may contain vast quantities of personal information, including names, telephone numbers, addresses, location data, and other identifying details.
These databases can originate from government agencies, private companies, or even information stolen during cyberattacks before being sold or circulated online.
While Dutch intelligence services argue that such information is vital for investigating terrorism, espionage and national security threats, strict legislation limits how the data may be collected, stored and accessed.
Under Dutch law, agencies must restrict access to authorised personnel, delete irrelevant information and avoid retaining personal data indefinitely.
CTIVD Chairman Hugo Hillenaar warned that processing such enormous collections of personal information inevitably affects the privacy of large numbers of innocent people.
“The processing of data from bulk datasets constitutes an invasion of privacy for the individuals included in them,” Hillenaar said, noting that the overwhelming majority of people appearing in these databases have no connection to terrorism or espionage investigations.
Government Accepts Need for Improvements
The Dutch Ministry of Defence acknowledged that the use of large datasets has significant privacy implications but maintained that the capability is essential for modern intelligence operations.
Defence Minister Dilan Yeşilgöz and Interior Minister Pieter Heerma said they broadly accept the oversight body’s recommendations and confirmed that several improvements are already being implemented to strengthen compliance and oversight procedures.
The government maintains that intelligence agencies require access to large volumes of information to identify increasingly complex national security threats in the digital age.
Civil Rights Groups Remain Concerned
Digital rights organisation Bits of Freedom criticised the findings, arguing that Dutch intelligence services have failed to learn from previous controversies involving the unlawful collection of citizens’ personal data.
The organisation warned that the agencies may now be using these datasets to train their own artificial intelligence systems, while also expressing concern that some of the information may originate from hacked databases obtained through illegal data breaches.
“They even appear to be purchasing data that comes from data leaks,” the organisation said.
Bits of Freedom director Evelyn Austin argued that intelligence agencies continue seeking broader surveillance powers despite repeatedly demonstrating weaknesses in their handling of sensitive information.
“They do not get their data management in order and do not allow themselves to be constrained by the law,” Austin said.
She added that robust independent oversight remains essential because intelligence services necessarily operate largely outside public scrutiny.
Growing Debate Over Intelligence and AI
The report comes amid increasing international debate over how intelligence agencies use artificial intelligence, large-scale data analytics and commercially available personal information.
As governments invest heavily in advanced digital surveillance capabilities, privacy advocates continue to call for stronger safeguards to ensure that expanding intelligence powers remain subject to democratic oversight and legal accountability.
The CTIVD’s findings are expected to intensify discussions in the Netherlands over how to balance national security requirements with the protection of citizens’ fundamental privacy rights.