The Toeslagenaffaire: a personal dossier of institutional failure

Summary

The childcare benefits scandal (Toeslagenaffaire) is one of the largest administrative scandals in Dutch history. More than 69,000 families were registered in the recovery operation (as of February 2026). The Belastingdienst operated interconnected surveillance systems — RAM (1998-2018), FSV (2007-2020), Heidi (2013-2017) — that profiled citizens on nationality, criminal records, and internet behavior without legal basis. Tax data was shared with crime-fighting centers (RIEC/LIEC) without citizens’ knowledge. This dossier describes the personal impact: loss of health, income, business and home, and eventual emigration to Croatia.

Key Findings

• The Risk Assessment Model (RAM) profiled virtually all taxpayers for 20 years (1998-2018), making an estimated 500,000 selections
• The Fraud Signalling Facility (FSV) registered ~180,000 citizens as fraud suspects without verification or notification (2007-2020)
• An additional ~290,000 persons were included in FSV-related signals (total historical registrations)
• RAM data was shared with RIEC/LIEC crime-fighting centers for criminal investigations — a purpose shift violating GDPR
• Heidi (2013-2017) logged portal data from the benefits website without informing visitors
• 6 comparable systems remain active: Gruff, Informatiesjabloon, KTA, IHP, SMOB, PRISMA
• The AP fined the Belastingdienst €2.75 million for FSV violations; total fine €3.7 million
• More than 3,000 children were removed from their families based on government-enforced claims
• It took eight years for voting rights as an emigrant to be restored
• Compensation covers only 15-31% of actual documented damage (ECLI:NL:RBNHO:2025:8961: 4.6% coverage)

Context

The scandal arose from the deployment of interconnected surveillance systems by the Tax and Customs Administration/Toeslagen:

• RAM: Linked 69 source systems including nationality data (BRP), criminal records (GEFIS), vehicle data (RDW), and scraped internet data. 200 of 248 authorized users had unrestricted access. 2,662 Excel extracts were distributed via USB, email, and CDs without controls.
• FSV: Registered citizens as fraud suspects without verification, due process, or notification. All Belastingdienst directorates had access. FSV data flowed into Deloitte’s risk models as unfiltered exports.
• Deloitte models: Built risk classification models with “BVR Nationaliteit” as fixed source data, trained on only 200 examples.
• Heidi: Logging system on the benefits website from mid-2013, collecting user behavior data.

The system was designed with criteria that disproportionately affected self-employed entrepreneurs, families with dual nationality, and families with complex income situations. 71% of victims had a migration background (CBS).

In January 2021, Prime Minister Mark Rutte apologised on behalf of the cabinet. The apologies were not directed at specific individuals and offered no concrete restitution.

The trajectory: from the Netherlands to Croatia

Preliminary events

In 1996, I was shot while working as a taxi driver, leading to a prolonged decline in my physical health. Despite mental resilience, my condition deteriorated. My IT career suffered damage, leading to severe financial problems and eventually the Debt Restructuring of Natural Persons Act (WSNP).

The blow

Work at a holiday park was abruptly terminated, leading to legal disputes and unpaid invoices. The business network collapsed. Government support was inadequate and financial pressure increased. Stress further damaged health.

The flight

In 2016, we left the Netherlands and settled in Croatia. The choice was not voluntary — Croatia was inside the EU where we could make a fresh start. At the time, Croatia was not yet in the Schengen area (it joined Schengen on 1 January 2023), but it offered lower healthcare costs and a regulated environment. Problems with insurance and legal matters persisted.

The aftermath: restitution that fails to materialise

In 2021, Prime Minister Rutte’s apologies followed. These apologies had no bearing on the personal losses we had suffered. Attempts to rebuild our lives in Croatia were further complicated by additional obstacles: financial shortfall and inadequate support from consultancy firms.

The recovery operation systematically undercompensates:

The Commission for Actual Damage (CWS) stopped accepting new cases on 19 March 2026. Approximately 7,000 parents were redirected to flat-rate routes with no individual damage assessment.

Five mechanisms keeping cases hidden

1. Non-publication: Single-judge rulings (the majority of FSV/AVG cases) are standardly not published on Rechtspraak.nl
2. Pseudonymization: Advocate names, plaintiffs and locations replaced with generic terms — making it impossible to search by lawyer
3. Settlement policy: The Belastingdienst offers flat-rate “tegemoetkoming” instead of compensation to prevent jurisprudence on liability
4. Fiscal confidentiality (art. 67 AWR): Used to refuse access to internal communication about selection criteria (ECLI:NL:RBDHA:2025:6422)
5. Burden of proof on the victim: Citizens must prove damage while the Belastingdienst has already deactivated systems and registration reasons are no longer traceable

Analysis

The benefits scandal is not an incident but a systemic failure. The interplay of automated decision-making, lack of oversight, and an institutional culture that avoids responsibility created a machine that destroyed families without anyone within the organisation intervening.

The recovery operation repeats elements of the original problem: victims must prove what was taken from them, while the government cannot or will not always provide the evidence. The datakluis — 64 million unsorted files discovered in April 2026 — has been searched by none of the official investigations. The asymmetry in power and information remains unchanged.

Related Entities

• /en/entities/toeslagenaffaire
• /en/cases/toeslagenaffaire/

Internal References

• /en/investigations/toeslagenaffaire-research-overview-2026
• /en/investigations/ram-mkb-profiling-tip-of-iceberg
• /en/investigations/riec-liec-belastingdienst-data-sharing
• /en/investigations/heidi-logging-system-benefits-website