Fine for SVB after flawed identity check

The Personal Data Authority (AP) is fining the Social Insurance Bank (SVB) 150,000 euros for inadequate identity verification by the telephone helpdesk. Clients with AOW benefits ran the risk that sensitive information would end up with people who are not entitled to it. The SVB has since taken measures.In 2019, data of an SVB client came into the hands of someone who should not have received that data. The client discovered that someone had managed to request benefit information through the SVB's telephone help desk. In an average week, the SVB deals with as many as 20,000 people who have questions about social security laws, including the AOW. Moreover, the SVB's approximately 1,500 service employees all have access to client data.In such a situation, it is very important that the rules for providing information by telephone are clear.

https://www.autoriteitpersoonsgegevens.nl/nl/nieuws/boete-voor-svb-na-gebrekkige-identiteitscontrole