Inspection Report on Information Management at Toeslagen: Systematic Information Chaos in the Benefits Affair

Report Identification

1. Summary

The Inspectorate for Government Information and Heritage concludes in its April 2021 report that Toeslagen’s information management structurally failed from 2013 to 2020. These findings are critical to the Dutch Benefits Affair (Toeslagenaffaire). Citizen information was scattered untraceably across at least eleven storage locations. Assembling a single parent file took about 400 hours. An estimated 9,000 appeal dossiers were prematurely destroyed. Toeslagen’s management team had no operational oversight of information management. They set other priorities instead.

2. Core Findings

2.1 Absence of the Parent File

No central parent file existed. Information about one citizen was distributed across at least eleven different storage locations. Assembling a complete parent file required an estimated 400 hours per file. This violates the Archives Act 1995 (Archiefwet 1995), which requires the government to maintain proper and verifiable information management.

Implication: Citizens and their representatives could not obtain timely access to their own files. This directly affects legal protection in objection and appeal proceedings.

2.2 Mass Destruction of Appeal Dossiers

From 2019 to 2020, an estimated 9,000 appeal dossiers were prematurely destroyed. The destruction chain proceeded as follows:

1. The 2015 Selection List established a retention period of 12 years
2. The Inspectorate (IHH) did not examine paper files
3. Toeslagen files were mixed with Tax Administration (Belastingen) files
4. A 7-year retention period was applied instead of the prescribed 12 years
5. The label “Toeslagen” was available but was not used as a filter
6. The Inspectorate was not informed of this practice
7. Toeslagen was not notified of the consequences

Implication: Destroyed dossiers cannot be used in ongoing court cases, objection proceedings or parliamentary inquiries.

2.3 Absence of Management Oversight

Toeslagen’s Management Team (MT) had no operational visibility over information management. The MT set other priorities. This happened while:

• The Inspectorate issued recommendations for improvement in 2015 and 2019
• Toeslagen ignored both sets of recommendations
• No management information existed on information management quality

2.4 GDPR Cleanup Without Guidelines

After 2018, a cleanup operation was conducted under the General Data Protection Regulation (AVG/GDPR). This cleanup was carried out without adequate guidelines or protocols. What documents were destroyed in the process is unknown.

3. System Architecture and IT Infrastructure

Toeslagen’s technical infrastructure consisted of a fragmented collection of systems and storage media:

3.1 Primary Systems

3.2 Storage Media

• Approximately 100 network drives containing roughly 3 million files collectively
• CAF-specific storage: personal drives, Q-drives, FIOD drives
• No integrated overview existed of where which information was stored

3.3 Systemic Deficiencies

• TVS provided no workflow support, necessitating manual processing
• DAS operated on mainframe technology with limited search and archival functionality
• TAV was intended as a successor but was not fully operational during the investigation period
• The fragmented storage structure made assembling a complete file picture impossible without big manual effort

4. The Destruction Chain, Detailed Reconstruction

The premature destruction of appeal dossiers proceeded through a chain of systemic failures and communication breakdowns:

Selection List 2015 (12-year retention period)
    ↓
IHH inspection did not examine paper files
    ↓
Toeslagen files mixed with Tax Administration files
    ↓
7-year retention period applied (instead of 12 years)
    ↓
Label "Toeslagen" available but not used
    ↓
Inspectorate not informed
    ↓
Toeslagen not aware of destruction
    ↓
~9,000 appeal dossiers destroyed (2019-2020)

Each link in this chain represents a separate failure mechanism. Their combined effect resulted in the irreversible loss of evidentiary material.

5. Specific Incidents

5.1 Palmen Memo (13 March 2017)

The Palmen memo, dated 13 March 2017, was not archived in the primary information system. The document was later recovered from email inboxes. This shows the absence of adequate archival procedures for policy-relevant correspondence.

5.2 Lost Mail, Capgemini Investigation

A Capgemini investigation documented 249 complaints about lost mail during the period April 2014 to early 2020. This indicates structural problems in mail processing and registration, further undermining the broader information management framework.

5.3 GDPR Cleanup

The GDPR cleanup conducted after 2018 was executed without documented protocols or guidelines. As a result, tracing what information was removed is impossible. This is a particular problem given the simultaneity with ongoing court cases and parliamentary inquiries.

6. Ignored Recommendations

The Inspectorate issued recommendations in two prior rounds that Toeslagen did not act upon:

The failure to act on these recommendations meant that already-identified deficiencies remained unaddressed for seven years.

7. Institutional Context

The findings in this report reinforce and contextualize the findings from Report 1, Report 2 and Report 3. The untraceable and destroyed files constituted a direct obstacle to:

• Citizens seeking to clear their names
• Lawyers preparing objections and appeals
• The Parliamentary Inquiry Committee on Childcare Benefits in its fact-finding investigation
• The execution of the remediation operation (hersteloperatie)

8. Sources

1. Inspectie Overheidsinformatie en Erfgoed. De informatiehuishouding van Toeslagen. April 2021. ISBN 978-90-773541-0-0.
2. WOO documents, obtained under the Dutch Open Government Act (Wet open overheid).
3. Cross-references with Report 1, Report 2 and Report 3 (Parliamentary Inquiry into Childcare Benefits).
4. Capgemini. Investigation into complaints about lost mail at Toeslagen. Period: April 2014, early 2020. (249 documented complaints.)
5. Selection List 2015 (Selectielijst 2015), as applicable to the retention periods of the Ministry of Finance.
6. Archives Act 1995 (Archiefwet 1995).
7. General Data Protection Regulation (AVG/GDPR), context for the cleanup operation after 2018.

9. Timeline

Research dossier compiled by John van der Velden for Open Brief Network. All sources are verified and traceable.