Credibility of the Dutch Rule of Law

Summary

In 2019, a sealed digital environment was created at the Belastingdienst (Dutch Tax and Customs Administration), the ‘data vault’, containing at least 64 million unsorted files from the Belastingdienst, Dienst Toeslagen (Benefits Service) and the Douane (Customs). This vault remained hidden from parliamentary inquiry committees for years, while multiple documents should have been explicitly provided to, among others, the Parliamentary Inquiry into Fraud and Service Provision (PEFD) and the Parliamentary Interrogation Committee on Childcare (POK).

The parliamentary letter and accompanying timeline published on 22 May 2026, a Friday evening before the Pentecost long weekend, reveal that State Secretary Sandra Palmen (Benefits Recovery) was already aware of the vault’s existence and its potential relevance to PEFD deliveries in summer 2025. Memos dated 31 July 2025 show that the civil service had already issued warnings at that time. Minister Eelco Heinen (Finance, VVD) was also aware as the politically responsible minister. Parliament was not informed until April 2026, nine months later.

The announced ‘independent investigation’ is commissioned by the Belastingdienst itself: the institution at the centre of the scandal is investigating itself.

What happened

The creation of the data vault (2019)

In 2019, the Belastingdienst was grappling with GDPR implementation problems and backlogs in information management. To prevent documents requiring permanent retention from being destroyed without assessment and to stop unauthorised access to personal data, millions of files from shared network drives were sealed in bulk. This became the data vault.

The files were stored randomly and without sorting. Not all files are substantively relevant. But sampling conducted in late 2025 confirmed that the vault contains documents that should have been provided to the parliamentary inquiries into the childcare benefits scandal.

Important detail: where the files originally resided, only an HTML-format reference was left behind. This file type was not included in the PEFD search, which is why the data vault and its contents remained outside the deliveries.

Nine months of silence (July 2025, April 2026)

The ‘Unvalidated timeline data vault’ (parliamentary document 2026D24512) and accompanying ‘Memos accompanying data vault timeline’ (2026D24513), published on 22 May 2026, reveal the following:

On 31 July 2025, memos were sent to both state secretaries, the State Secretary for Taxation/Belastingdienst and the State Secretary for Benefits Recovery (Palmen), regarding the data vault. On 16 October 2025, a new memo followed for Palmen about the data vault. By late 2025, sampling had been completed confirming that PEFD-relevant documents were missing from earlier deliveries.

The House of Representatives was not informed until 15 April 2026, nearly nine months after the first civil service memos, via a parliamentary letter. In the emergency debate of 16 April 2026, State Secretary Palmen confirmed when asked: she had been informed “around the recess” that something had been found. SP MP Jimmy Dijk confronted her directly: “Nine months ago. You give no answer whatsoever to the question of what the consideration was not to inform the House. Why?”

An answer to that question did not materialise during the debate.

The letter of 22 May 2026: a classic The Hague manoeuvre

The second parliamentary letter on the data vault, parliamentary document 2026Z10806 / 2026D24511, appeared on Friday 22 May 2026, the evening before the Pentecost weekend. The timing exhibits all characteristics of a deliberate strategy to minimise public and journalistic attention:

• Friday evening, after the television news and after the deadline for print media;
• Just before a long weekend (Pentecost), delaying debate and follow-up questions by three days;
• The annexes contain a timeline that the government itself qualifies as “unvalidated”, a remarkable disclaimer for government documentation that is supposed to underpin factual accountability.

The letter is signed by State Secretary Eerenberg (Finance) and State Secretary Palmen (Benefits Recovery). Minister Eelco Heinen (Finance, VVD), the politically responsible minister above both state secretaries, did not co-sign the letter, even though he as Minister of Finance was previously also aware of the situation.

The ‘independent’ investigation that is not independent

In both the first parliamentary letter (April 2026) and the second (May 2026), the officials announce that an independent investigation has been initiated into how the data vault could have remained out of sight for so long.

The commissioning party for this investigation: the Belastingdienst itself.

This is structurally at odds with the principle of independent oversight. The organisation at the centre of the benefits scandal, which created the data vault, which provided deliveries to parliamentary committees and which withheld documents from parliament for nine months, has commissioned itself to investigate itself. The conclusions of such an investigation are by definition unreliable, regardless of the actual findings.

Pieter Omtzigt and Renske Leijten stated it pointedly: “By keeping this vault hidden, external and independent investigation has been sabotaged. And this can go unpunished?”

Evidence

What the timeline and memos demonstrate

The annexes published on 22 May 2026 contain memos with the following document numbers and dates:

• Doc. 1: 31-7-2025, Memo ‘stasFBD’ (State Secretary for Taxation/Belastingdienst) regarding data vault
• Doc. 2: 31-7-2025, Memo ‘stasHT’ (State Secretary for Benefits Recovery / Palmen) regarding data vault
• Doc. 3: 16-10-2025, Memo ‘stasHT’ (Palmen) regarding data vault

These are three formal civil service memos, directed to the officials, demonstrating that the state secretaries were informed at least nine months before parliament.

What Palmen said in the debate

In the plenary debate of 16 April 2026, MP Westerveld (GroenLinks-PvdA) asked Palmen directly: “Did you know about the existence of this data vault in July 2025?”

Palmen’s answer: “I was informed around the recess that something had been found.”

The summer recess of 2025 ended in late August 2025. The memos are dated 31 July 2025. Palmen’s statement that she was informed “around the recess” corresponds with the content of the published memos, thereby confirming that the information deficit towards parliament amounts not to months but to quarters.

What Eerenberg said

State Secretary Eerenberg stated on 17 April 2026, prior to the Council of Ministers: “What happened between now and 2019, that is a question mark for me too.” He explicitly acknowledged: “This should have been communicated to the House much earlier and much more clearly. I’m not going to say anything else about that, we didn’t do that well.”

Eerenberg himself stated he had heard about the data vault “in recent weeks”, well after the memos of July 2025. This raises the question of whether the civil service leadership deliberately kept Eerenberg outside the information loop or whether the memos were only addressed to Palmen (and not to him).

The role of Minister Heinen

Eelco Heinen (VVD) is, as Minister of Finance, the politically responsible superior of both state secretaries. The memos of 31 July 2025 are addressed to the state secretaries. Heinen did not co-sign the parliamentary letter of 22 May 2026, but as minister he is final responsible for informing parliament. In the plenary debate of April 2026, Heinen was not asked to appear. The question of when Heinen was personally informed remains unanswered to date.

Analysis

Pattern: The Hague reflex

The pattern emerging from the data vault is not new; it is the institutional reflex that also enabled the original benefits scandal:

1. A problem is identified internally;
2. Civil service memos are drafted and sent to the political leadership;
3. The political leadership decides, implicitly or explicitly, to delay the obligation to inform parliament;
4. Following external pressure or journalistic investigation, a parliamentary letter follows, timed for minimal political damage;
5. An investigation is announced, with the commissioning party and scope chosen such that the conclusions are neither verifiable nor binding.

CDA MP Inge van Dijk articulated it directly in the debate: “The existence of the data vault had been known for much longer. I want to know why the House was not informed immediately. Was it a conscious choice or was it failure?”

None of the officials provided an answer to that.

The ‘unvalidated timeline’: a legal and political signal

The fact that the government labels its own timeline as “unvalidated” is in itself telling. Under normal administrative relations, a timeline compiled by the government and sent to parliament is an official document. By applying the label “unvalidated” to the timeline, the officials create an escape: the facts can later be adjusted without earlier statements having to be labelled as factually incorrect.

This is legally relevant: if parliament concludes on the basis of this timeline that officials violated the duty to inform (Article 68 of the Constitution), the officials can fall back on the disclaimer that the timeline was merely “unvalidated.”

Violation of the duty to inform (Article 68 of the Constitution)

Article 68 of the Constitution obliges ministers and state secretaries to provide the Houses “with the information requested, provided that providing such information does not conflict with the interests of the state.” The interest of the state is not at stake here. The data vault contains no state secrets; it contains documents about the lawfulness of benefits decisions affecting tens of thousands of citizens.

That State Secretary Palmen was already aware in July/August 2025 and parliament was not informed until April 2026, nine months later, constitutes a demonstrable violation of the active duty to inform, as further elaborated by the Supreme Court in case law on ministerial responsibility.

Self-investigation as a legitimation strategy

The childcare benefits scandal was already characterised by the deployment of seemingly independent investigations that were in reality controlled by the government itself or whose scope was so narrow that structural problems remained invisible. The ‘independent investigation’ now commissioned by the Belastingdienst itself repeats this pattern.

A genuinely independent investigation would be initiated by the House of Representatives itself (parliamentary inquiry or investigation committee), by the National Ombudsman or by a party appointed by a court. The fact that self-investigation has again been chosen renders the conclusions unusable as a basis for political accountability from the outset.

The scale: from 64 to 24 million relevant files

In April 2026, the cabinet spoke of 64 million files. The letter of 22 May 2026 reveals that after filtering, 24 million files are substantively relevant to the childcare benefits scandal. These are documents that could document the decision-making process surrounding tens of thousands of families and which have remained outside the reach of independent investigation for more than seven years.

DENK MP Dogukan Ergin called the data vault a “digital cover-up.” Pieter Omtzigt noted that by keeping the vault hidden, “the Public Prosecution Service may also not have been able to investigate everything” in previously initiated criminal investigations.

Conclusions

The facts lead to four hard conclusions:

1. The duty to inform has been violated. Palmen was informed at least nine months before parliament. This is not a mistake or omission, but a demonstrable choice, supported by internal memos.

2. The timing of the letter of 22 May 2026 is manipulative. The publication of a parliamentary letter on a Friday evening before a long weekend is a classic strategy to delay parliamentary and public reaction. Combined with the label “unvalidated” on the timeline, this pattern is not coincidence but policy.

3. The ‘independent investigation’ is not independent. An investigation commissioned by the Belastingdienst itself does not meet the minimum requirements of independent oversight. Its outcomes cannot serve as a basis for parliamentary accountability.

4. The rule of law has not merely been damaged, it is actively damaging itself. The childcare benefits scandal began as an implementation error and grew into a constitutional crisis because the government actively withheld information from judges, inquiry committees and parliament. The data vault shows that this pattern has not been broken. The organs that are supposed to uphold the rule of law — the Ministry of Finance, the Belastingdienst, the cabinet — continue to systematically circumvent the mechanisms that enable citizens and parliament to exercise control.

Sources

• Tweede Kamer, Parliamentary letter: Data vault: Proposal external committee, reporting to your House, external investigation & progress of two-track approach, 22 May 2026, reference 2026-0000226159, 2026Z10806 / 2026D24511
• Tweede Kamer, Annex: Unvalidated timeline data vault, 2026D24512
• Tweede Kamer, Annex: Memos accompanying data vault timeline, 2026D24513
• Tweede Kamer, Annex: File type analysis, 2026D24514
• Tweede Kamer, Annex: Decision memo for parliamentary letter data vault, 2026D24515
• Tweede Kamer, Plenary report debate data vault, 16 April 2026 (2025-2026/64), plenary report
• Accountancy Vanmorgen, Belastingdienst discovers data vault with 64 million files, 16 April 2026
• Taxlive.nl, Belastingdienst finds potentially relevant data for benefits inquiry, 16 April 2026
• Taxlive.nl, Eerenberg also has many questions about discovered benefits data, 17 April 2026
• NSC, Omtzigt & Leijten: Silence over data vault is sabotage of the rule of law, 17 April 2026
• Herstel Toeslagen (UHT), Data vault found, no consequences for already taken recovery decisions, 16 April 2026
• Hart van Nederland, Belastingdienst discovers vault with millions of files related to benefits scandal, 15 April 2026
• Taxence, Update data vault Belastingdienst and missed documents, 16 April 2026
• Open.overheid.nl, Letter to parliament: Data vault notification (primary parliamentary letter April 2026)
• Dagelijkse Standaard, Officials kept secret data vault hidden, 23 May 2026
• Hackedemia, Belastingdienst shares search behaviour of benefits victims with American data company, May 2026