Enforcement action · Autoriteit Persoonsgegevens

[AP] AP controleert vanaf 1 juli registratie scanauto’s in algoritmeregister

[AP] AP controleert vanaf 1 juli registratie scanauto’s in algoritmeregister is an AI-related enforcement action involving Autoriteit Persoonsgegevens. The Dutch Data Protection Authority will start checking on July 1, 2026, whether municipalities have registered their scan car deployments in their algorithm registers and conducted necessary DPIAs.

Action details

Agency
Autoriteit Persoonsgegevens
Jurisdiction
NL
Enforcement type
investigation
Document type
agency report
AI risk category
high
Topic
ai governance

Summary

The Dutch Data Protection Authority (AP) announced it will begin controls on July 1, 2026, to ensure municipalities have registered their use of scan cars (which employ algorithms and AI for tasks like parking enforcement) in their mandatory algorithm registers. A recent study found less than half of municipalities were compliant. The AP emphasizes three key areas: ensuring scan cars are in the algorithm register for transparency, conducting independent Data Protection Impact Assessments (DPIAs), and preventing 'function creep' where data collected for one purpose is used for another without proper assessment. Data Protection Officers (FG's) are highlighted as crucial for ensuring compliance.

Primary source

https://www.autoriteitpersoonsgegevens.nl/actueel/ap-controleert-vanaf-1-juli-registratie-scanautos-in-algoritmeregister →

Related Autoriteit Persoonsgegevens actions

Frequently asked questions

What is [AP] AP controleert vanaf 1 juli registratie scanauto’s in algoritmeregister?
The Dutch Data Protection Authority (AP) announced it will begin controls on July 1, 2026, to ensure municipalities have registered their use of scan cars (which employ algorithms and AI for tasks like parking enforcement) in their mandatory algorithm registers. A recent study found less than half of municipalities were compliant. The AP emphasizes three key areas: ensuring scan cars are in the algorithm register for transparency, conducting independent Data Protection Impact Assessments (DPIAs), and preventing 'function creep' where data collected for one purpose is used for another without proper assessment. Data Protection Officers (FG's) are highlighted as crucial for ensuring compliance. Primary source →
Which agency brought the action?
Autoriteit Persoonsgegevens brought this enforcement action in NL. Primary source →
What was the penalty?
No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty. Primary source →
When did the action take effect?
The most recent activity on this action was published on 6/4/2026. Primary source →
Where can I find the primary source?
The primary source for [AP] AP controleert vanaf 1 juli registratie scanauto’s in algoritmeregister is at https://www.autoriteitpersoonsgegevens.nl/actueel/ap-controleert-vanaf-1-juli-registratie-scanautos-in-algoritmeregister. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Related

Stay informed

Get every Autoriteit Persoonsgegevens AI enforcement update.

Start 14-day trial →