The map of the machine: every system of Belastingdienst profiling, layer by layer
All known systems of Belastingdienst profiling on one map, in four layers: the selection layers from RAM to FAM, the signal systems from FSV to the IP address, the enforcement organisation from EOS to ITE, and the data infrastructures beneath. With the SME shares per layer. Closing piece of the reconstruction series on EOS, ITE and the Information Point archive.
Summary
This series began with one question: what happened to team EOS? The answer proved to be a machine with many parts, spread across three decades. This closing piece puts every known system on one map — four layers deep, with SME as the largest user. Each layer is documented in earlier parts of the series; here they are joined into the whole they actually were.
Layer 1 — Selection: what chooses
The top layer determines who is seen. This is where profiling lives.
| System | Period | What it did | SME share |
|---|---|---|---|
| RAM (Risk Analysis Model) | 1998-2018 | 2.2 million entities, 250 tables, 69 sources; traffic light red = selection | 89% of all use (19,091 queries, 2017) |
| RDM (Regional Data Model) | 2015-2018+ | SME selection layer atop RAM; compliance colours and quadrants | SME-specific |
| Tracks 1/2/3 + emergency provision + IVT | 2018-2021 | GDPR copy, transaction tracks, unsanitised RAM extracts | Continuous |
| Deloitte RS model | 2013+ | Benefits risk selection at intake; model “trained” and “recalibrated” | Benefits, with interfaces |
| DF&A signal models + BNO | 2024-now | Automated SME risk selection; traceable criteria via signal administration | SME-specific |
| VVG (wealth comparison tool) | pilot 2024 | Assets vs. spending; into production for signal/selection/assessment/audit | ITE work process |
| FAM (Fiscal Analysis Model) | pilot 2025 | Dashboards per sector/target group; MVP 2026 | SME-strategic |
| KTA, Information Template, IHP, IFL, SMOB, Gruff, PRISMA | now | Seven RAM-like successors; DPA demanded 2025 immediate phase-out of the first two, in vain | Broad, incl. SME |
Layer 2 — Signals: what registers
This layer records what becomes known about people and businesses — from the organisation itself and from chain partners.
| System | Period | Function |
|---|---|---|
| FSV (Fraude Signalling Facility) | 2013-2020 | Diary of fraud signals; multi-directorate: Personal Intensive Supervision, GO, CAP and SME main purpose; covenant partners wrote along |
| TSV (Temporary Signals Facility) | 2020-2023+ | Emergency successor to FSV; DPA advised; authorisations via ITE |
| Tips mailbox 1194 | -2020 | Reporting stream, managed by team EOS; silent since 2-7-2020 |
| IP monitoring, Plotter, P4 risk scores | 2014-2017+ | IP addresses at application; postcode maps, risk points per 1,000 applicants |
| PIT diary → Personal diary | -2020 | Work environment for Personal Intensive Supervision, fed by FSV |
| IMS, BSM, SAS | 2013+ | Information, business support and analysis systems around the selection layers |
| MSNP, HHR, AKI reports | 2014+ | Recovery and enforcement tracks; labour chain inspection feeds |
Layer 3 — Enforcement: who acts
Selection and signals flow into people and teams.
| Component | Period | Role |
|---|---|---|
| EOS / external government cooperation | -2023 | Mailbox, signal routing, pre-weighing documents to the RIEC |
| ITE teams | 2021-now | Eleven teams, 12 reporting desks, 562,200 hours in 2026; FIOD posts carousel priorities directly |
| ARN (Approach to Risky Networks) | now | Zwolle team, treatment plans per network, own dashboard pilot |
| Combined Team Approach to Facilitators | 2012+ | Hawaii case (7-10-2012) → CAF-11 |
| RIEC/LIEC, LSN, iCOV (iRR/iRV), SKC/DON, AMS/AMU, IKZ | 2011-now | Partnerships in which ITE forms the Belastingdienst side |
| BOAs (Wpg) | -2027 | Special investigating officers under LC ITE |
Layer 4 — Undercarriage: what carries it all
The infrastructure beneath the machine.
| Building block | Function |
|---|---|
| 72 RAM source systems | From BRP/GBA, RNI, BAG, WOZ, KvK, Kadaster, RDW to GEFIS and internet scrapes |
| Legislation | WGS (1-3-2025) as basis for the partnerships; UAVG/GDPR around it |
| Data and archive platforms | GDA (documents), data vault (64m files), FMI application (reports, routing on BSN/RSIN to the 12 desks since 2026), GKT/LIV as stewards |
| Chain registers | SVB (child benefit), DUO, CJIB, Logius/DigiD mailbox, LRKP, COA |
The pattern the map shows
Three things stand out once the layers sit side by side. First: SME is the through-line. From the 89 percent share in RAM, via the SME purpose authorisation on the FSV, the SME selection layer RDM, to the ITE teams running half a million hours within the SME directorate in 2026 — the largest affected population and the largest operational arm belong to the same segment. Second: every layer has a successor. RAM got tracks and seven successors; the FSV got the TSV; the tips mailbox got the reporting landscape; EOS got ITE. Shutdown proved to be migration each time. Third: the statutory basis followed practice — from covenants via the 2014 exploration to the 2025 WGS, which legalised the partnerships only after they had run for years.
The map is now complete as far as public sources reach. Where blank spots remain — the seven successors in detail, the post-2024 DF&A models, the precise workings of KTA — what holds for this entire archive holds: the documents exist, the only question is whether anyone asks.
The affected groups in a row
The map has four layers; the consequences have as many. These are the groups the machine found, with the figures documented in the earlier parts of this series.
| Group | Scale (known/estimated) | How the machine hit them | Redress |
|---|---|---|---|
| Benefits parents and children | 44,102 recognised affected parents (69,722 registrations); 4,791 children with out-of-home placement | RS model, FSV, collective stoppages 2013-2019; 71% migration background | Billions in redress, legislation, 69,488 integral reviews |
| FSV-registered persons | some 180,000 registrations; 11,236 on nationality (2012-2014); 58,500 “highest risk profile” (2019) | Diary with signals from four directorates + covenant partners | DPA fine 2.75m euros; limited individual redress |
| SME entrepreneurs | conservative estimate 100,000-300,000 affected; SME = 89% of RAM use | RAM/RDM traffic light, fraud/EOS tracks, FSV SME main purpose, ITE intensive supervision | None — only gate scheme IT 2013-2017; third-party research closed 2025 |
| Signals without sender | 16,529 FSV registrations without a competent unit | Forgetting as systemic risk | None |
| Foreign victims | some 950 known to recovery; 83 reports via BAM | Recovery programme reaching into Morocco; RO/BG regimes | Longest waiting times of all groups |
| People under intensive supervision now | 12 reporting desks, 562,200 ITE hours in 2026 | FMI routing on BSN/RSIN; WGS partnerships | Yet to be written |
The pattern of ignoring: the DPA list
Through all layers runs one institutional constant: the Dutch Data Protection Authority saw the danger early each time, and its interventions kept being left lying. The row is long enough for its own overview.
| Moment | What the DPA did or ordered | What the Belastingdienst did |
|---|---|---|
| July 2020 | 2.75m euro fine for the FSV | Paid; continued the signal infrastructure via TSV and covenants |
| 2021-2022 | Advice on the TSV; criticism of the LSI covenant (joint responsibility) | Tips processing stayed still until 2023; covenant adjusted only later |
| 9 July 2025 | Order: immediate phase-out of KTA and Information Template (critique: “comparable risks” to RAM) | Both systems kept running; replacement planned for 2027 |
| December 2025 | — | State secretary: “no reason” to assume harm |
| 2026 | Enforcement powers bounded; fines follow only new breaches | KTA (~18,000 users) and Information Template (38,000 subjects per year) still in production |
The meaning of this row is simple and unsettling at once: within a single organisation, a banned system (RAM) could be followed by seven successors, a fined system (FSV) by a temporary facility, and an explicit order (July 2025) by a two-year planning. Every layer of the map above carries its own shadow weight of unheeded instructions. The conclusion of this closing piece is therefore not that the state did not know what the machine did — the blueprints, process descriptions and presentations in this archive prove the opposite. The conclusion is that shutdown, in this system, is not an end but a transfer form.
Frequently asked questions
Which layers make up the Belastingdienst system landscape?
Four layers: selection (RAM to FAM), signals (FSV to IP monitoring), enforcement (EOS to ITE) and the undercarriage of source systems, legislation and data platforms.
Which groups did the machine hit?
Benefits parents (44,102 recognised), FSV-registered persons (about 180,000), SME entrepreneurs (100,000 to 300,000 estimated), foreign victims (about 950) and those under intensive supervision today.
Which Dutch DPA orders were ignored?
In July 2025 the DPA demanded immediate phase-out of the KTA and Information Template; the Belastingdienst kept both running with replacement planned for 2027.
What is the pattern behind all system changes?
Shutdown was migration each time: RAM got seven successors, the FSV the TSV, the tips mailbox the reporting landscape, and EOS became ITE.
References
- Open Brief: RAM and SME profiling — the tip of the iceberg
- Open Brief: RDM, the Regional Data Model
- Open Brief: RAM never disappeared
- Open Brief: EOS is dead, long live ITE
- Open Brief: The Ombudsman register
- Open Brief: The archive nobody read
- Open Brief: Deloitte’s model
- Open Brief: The FSV was everyone
- Open Brief: Recovering as far as Morocco
Investigation based on public sources. Corrections and additions are welcome via the contact page.
Sources
- Open Brief reconstruction series: RAM/RDM/Successors/EOS-ITE/Ombudsman/IPKOT/Deloitte/FSV/Foreign (October 2026)
- SME work and production plans 2025-2 and 2026, open.overheid.nl
- KPMG report RAM, February 2025; parliamentary letter policy response RAM, 6 March 2025; DPA letter 9 July 2025
- Childcare Allowance Information Point: risk selection process description 2013, FSV timeline, FSV visualization 2021, presentation series 2015-2017