| Q2Tactician | Pre-2014 manual fraud-investigation framework (Black Box / Waterproof / Internal-Affairs investigations)Welfare fraud investigation, pre-automation | 🔶 | Multi-agency teams convened on identified-suspect basis with documented evidentiary thresholds; selective use of personal data with proportionality assessments per matter.As of April 2026 |
| Q3Automator | Article 65 SUWI Act + Chapter 5a SUWI Decree (1 September 2014)Statutory cross-agency data-linking framework for welfare, tax, healthcare, housing and education datasets | ✅ | Statute permitted joining 17 categories of personal data including income, debts, education, pensions, business ownership, integration, compliance with labour-laws, fiscal data, health-insurance data, identifying data, property, vehicles, residence permit data, data on rights to public services, commercial data, social benefit and reintegration data (Stb. 2014, 320; Stcrt. 2014, 26306); risk-indication register held two years; no notification duty to risk-flagged individuals.As of April 2026 |
| Q3Automator | Five neighbourhood deployments (2014–2019): Capelle aan den IJssel, Eindhoven, Schalkwijk (Haarlem), Hillesluis & Bloemhof (Rotterdam)Neighbourhood-level risk-profiling pilots | ✅ | All five neighbourhoods were low-income; Schalkwijk, Hillesluis and Bloemhof had above-average non-Western migrant populations; deployment selection produced de facto neighbourhood-level targeting that the court characterised as carrying "the risk that use of SyRI will inadvertently make connections based on bias" (paragraph 6.93 of judgment).As of April 2026 |
| Q3Automator | Capelle aan den IJssel project (one of five)Municipal pilot deployment | 🔶 | 137 risk reports generated; 41 risk addresses flagged; zero follow-ups conducted; 62 of 113 risk reports characterised as false positives in a parallel project per Volkskrant reporting; Inspectie SZW evaluation acknowledged failure to use the outputs.As of April 2026 |
| Q3Automator | Across all SyRI deployments cumulatively (2014–2020)Multi-agency fraud-detection enforcement | ✅ | Zero confirmed cases of fraud detected and successfully prosecuted on the basis of a SyRI risk indication across the lifetime of the system; risk-indication register held two years; State Secretary Tamara van Ark refused audit and refused disclosure of the model.As of April 2026 |
| Q3Automator | Risk model — opaque scoring methodologyAlgorithmic risk scoring | ✅ | Court found the model not disclosed during proceedings; risk indicators not subject to public scrutiny; pseudonymisation insufficient because re-identification by named address was the operating purpose; State Secretary Tamara van Ark refused audit and disclosure.As of April 2026 |
| Q3Automator | Pre-deployment governance gates (DPA / CBP and Council of State opinions, 2014)Advisory oversight of statutory rollout | ✅ | DPA (CBP) and Council of State (Raad van State) issued critical opinions in 2014 raising privacy and proportionality concerns; both opinions ignored by the Minister; 2018 D66 motion not filed; State Secretary Tamara van Ark refused subsequent audit.As of April 2026 |
| Q2Tactician | NJCM / PILP / Privacy First / FNV coalition lawsuit (filed March 2018; hearing 29 October 2019; judgment 5 February 2020)Strategic civil-society litigation | ✅ | NJCM, Platform Bescherming Burgerrechten, Privacy First, Stichting KDVP, FNV, and Landelijke Cliëntenraad established standing as civil-society organisations; private plaintiffs Tommy Wieringa and Maxim Februari held to lack individual standing; lawsuit financed and coordinated by PILP-NJCM.As of April 2026 |
| Q2Tactician | UN Special Rapporteur Philip Alston amicus brief (filed September 2019)International human-rights intervention | ✅ | Alston filed an amicus brief warning that SyRI represented a "digital welfare state" pattern; subsequent characterisation in the OHCHR landmark-ruling press release that the Dutch government had attempted to "spy on the poor"; later academic synthesis in Alston's NYU Law work on digital welfare dystopia.As of April 2026 |
| Q2Tactician | District Court of The Hague judgment, 5 February 2020 (ECLI:NL:RBDHA:2020:1878 / Case nr. C-09-550982)Judicial ruling on lawfulness of SyRI | ✅ | Court ruled SUWI Article 65 + Chapter 5a SUWI Decree did not satisfy the fair-balance test under Article 8(2) ECHR on three grounds: (i) opacity of the risk model preventing affected individuals from contesting outcomes; (ii) absence of any duty to notify risk-flagged individuals; (iii) discriminatory neighbourhood-targeting risk per paragraph 6.93; rejected one-size privacy-impact-assessment defence; ordered State to pay EUR 3,250.51 in legal costs.As of April 2026 |
| Q2Tactician | State decision not to appeal; SyRI shutdown April 2020Post-judgment institutional response | ✅ | State did not appeal the ruling; SyRI deactivated April 2020; legislative repeal followed; SUWI Article 65 / Chapter 5a SUWI Decree withdrawn.As of April 2026 |
| Q3Automator | Toeslagenaffaire (childcare-benefits scandal) — parallel discriminatory algorithmic enforcementTax administration fraud-risk classification | ✅ | More than 20,000 parents falsely accused of childcare-benefit fraud, disproportionately Dutch nationals of non-Western descent; algorithmic risk classifications used to target families; over 1,000 children placed in foster care; Rutte III cabinet resigned 15 January 2021.As of April 2026 |
| Q3Automator | Lighthouse Reports investigation (2023) — continued useInvestigative journalism follow-up | 🔶 | Lighthouse Reports identified a "slightly adapted SyRI" operating in Utrecht's Overvecht district post-2020; the framing of "discontinued" SyRI did not match operational reality at the municipal level.As of April 2026 |
| Q3Automator | Wet Gegevensverwerking door Samenwerkingsverbanden ("Super-SyRI" / WGS) — entered into force 1 March 2025Successor cross-agency data-processing framework | 🔶 | WGS authorises four named partnerships — Care and Safety Houses (ZVHs), Regional Information and Expertise Centres (RIECs), the Financial Expertise Centre (FEC), and iCOV — to share personal data for risk-signalling; the framework has been subjected to extensive critical review by Privacy First, Bits of Freedom and academic commentators (the Super-SyRI paper).As of April 2026 |
| Q3Automator | EU AI Act Article 5(1)(c) — prohibition on social scoring effective 2 February 2025EU-wide regulatory ceiling | ✅ | Article 5(1)(c) prohibits AI systems that evaluate or classify natural persons over time based on social behaviour producing detrimental treatment in unrelated contexts or unjustified treatment disproportionate to behaviour; SyRI-style cross-domain risk scoring is treated as a paradigm case of the prohibited practice.As of April 2026 |