The Immigration and Naturalisation Service (IND) assesses all residence permit applications from the people who want to live, work or study in the Netherlands. The IND also assesses applications from the people who want to become Dutch. For this purpose, the IND processes a lot of personal data of customers and employees.
The IND believes that privacy is very important. That is why we process your data with great care and attention. In this Privacy Statement, you can read which data the IND collects and why. We also explain who we share your information with and what rights you have.
To keep the information clear, each topic is subdivided into two layers of information. First you read the most important information. Do you want to know more? Then click on the "more information" link.
The IND implements the aliens policy in the Netherlands. This means that the IND assesses all residence permit applications from people who want to live in the Netherlands or who want to become Dutch. This may involve refugees who are not safe in their own country and therefore apply for asylum here. This may also be people who want to work, study or form a family with someone who already lives here. In addition, the IND handles naturalization requests from the people who have been living here for so long that they feel Dutch and therefore want to apply for Dutch nationality. The IND assesses each application separately against the rules of the immigration policy. That means that we listen to the story of every applicant carefully so that every decision we take does justice to everyone's personal situation.
As an implementing organisation, the IND is part of the Ministry of Justice and Security. As a member of the government, the State Secretary for Justice and Security is responsible for the work of the IND. The IND has no influence on the immigration policy, which is determined via the Second and First Chamber. In addition, rules stem from (international) treaties such as the Refugee Convention and from EU legislation.
The IND has operating offices at various locations in the Netherlands; the main office is located at Rijnstraat 8, 2515 XP in The Hague. We also distinguish: counters (7), expat centres (8), application centres (4) and offices (4). For example, at the counters customers can pick up a residence document or, if necessary, have biometrics (such as fingerprints) collected. The expat centres help expats when they arrive in the Netherlands. Here, expats and graduate foreign students can submit an application, have biometrics done if necessary and collect a residence document. Asylum seekers report to an application centre to apply for asylum. Finally, the offices can only be visited by appointment with an IND employee.
The IND processes personal data of the people who apply for a residence permit in the Netherlands or the people who apply to become Dutch nationals. We also process personal data from sponsors, family members, interpreters, agents, employees of the IND and employees of other organisations. The IND receives the personal data from these people personally or from other persons or organisations involved.
The IND processes general personal data. For example, name, contact information, nationality and passport number, date and place of birth and marital status, and also special personal data if it is necessary for the work of the IND, for example, racial or ethnic origin, political views and beliefs, and also genetic and biometric data, sexual orientation and information about criminal cases or a criminal record. For a comprehensive overview, see ‘more information’.
The IND obtains personal data in various ways:
The IND collects the following personal data:
The IND cooperates, among others, with the following government services and social organisations:
Full overview of the organisations with which the IND cooperates
The IND needs your personal data to implement the Policy on Foreign nationals. This policy stems from the Aliens Act 2000 and rules and regulations that go with it, as well as from the Dutch Nationality Act. In addition, there are rules based on international treaties.
The IND manages the administration of foreign nationals. After identification, the personal data of the foreign nationals are registered herein.
Privacy legislation requires that we only process personal data for clearly defined purposes. The purposes for which we process your data are described in article 107 of the Aliens Act 2000.
In summary, the IND collects the personal data for, among other things:
The special categories of personal data are processed by us to the extent that this data are necessary for:
The IND cooperates in research conducted by the following institutes:
In the non-mandatory scientific research category, the IND facilitates Dutch and foreign universities. It may concern research conducted by the academic staff, as well as research conducted by students for master's theses.
The IND cooperates in research conducted by the following institutes, among others:
For more information about the background and nature of the research conducted by these institutes, see the websites mentioned above.
In general, personal data will only be processed during a research if this is strictly necessary for conducting the research. The results of the research can be published in scientific publications and or on the websites of the research institutes.
The publications contain the anonymised and / or aggregated results of the research. The privacy of the research participants is guaranteed in privacy regulations. Researchers sign a confidentiality agreement.
For more information about research conducted within and by the IND, you can contact the Research Supervision Department at Research & Analysis department via the contact form: IND contact form.
According to the Aliens Act 2000, the IND may or must provide other government organisations with information to perform their duties. For this purpose, such organisation requests (request) or demands information (claim).
The IND assesses whether it is necessary to provide your personal data and whether it does not harm your personal life. The IND checks why the organisation wants to get the data and whether it can do with less or no personal data.
The IND shares personal data with other organisations in the immigration chain. These are the Repatriation & Departure Service (DT&V), the Central Agency for the Reception of Asylum Seekers (COA), the Royal Netherlands Marechaussee, the National Police, the Ministry of Foreign Affairs, the Custodial Institutions Service (DJI), and the International Organisation for Migration (IOM). All these organisations have their own role in supporting foreign nationals on the way to the Netherlands, in the Netherlands and on the way out of the Netherlands. In addition, the IND shares data with other Dutch government organisations. For example, the UWV or the Public Prosecution Service (OM).
Sometimes the IND shares data with organisations that are not government institutions. They are often associations and foundations. For example, Dutch Council for Refugees (VWN). These organisations only receive personal data if this is necessary to implement the immigration policy.
The IND has taken measures to protect personal data and prevent misuse. All persons who can access the data must keep this information secret.
Customers and employees trust that personal data are in good hands with the IND. Therefore, the IND protects personal data with suitable technical and organisational measures.
The IND has introduced the Government Information Management Baseline (BIO) for the protection of data in the systems. The technical measures that the IND has introduced to protect personal data, are in accordance with the BIO. The IND actively implements the BIO.
The IND has taken extra measures to protect your data at all times. Technology and processes have been adjusted. The IND also teaches its employees what the risks there are and how they should deal with them. The IND ensures that the risks are reduced and audits the measures.
According to the law, the IND may transfer personal data on the basis of an 'adequacy decision'. An adequacy decision is the decision of the European Commission (EC) in which the EC has determined that this country protects data at the AVG level in its own laws.
The adequacy decision can apply to an entire country or for one or more sectors or regions in that country. Is there an adequacy decision in place? Then no additional measures are needed to provide personal data to this country, sector or region.
The EC has adopted an adequacy decision for the following countries and regions:
For Canada, the adequacy decision only applies to electronically processed data covered by the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).
Concerning the United States, there is no appropriate level of protection for the country as a whole. The EC has adopted EU-US Privacy Shield. Companies and institutions can receive a certificate from the Privacy Shield. Personal data may only be shared with companies and institutions with a Privacy Shield certificate. On the official website (https://www.privacyshield.gov/welcome) there is a list of all certified organisations.
Your personal data can also be passed on to a country without the adequacy decision. This can only be done if one of the exceptions referred to in Article 49 of the GDPR is met. Article 49, paragraph 1, sub 'd' of the GDPR allows sharing personal data if there are important reasons in the public interest. Art. 49 paragraph 4 sets the additional requirement that this public interest is recognised in a law of the European Union or a law of the Netherlands that applies to the organisation responsible for the processing of those personal data.
To the IND, the Aliens Act 2000 applies. It states that the IND must keep records of foreign nationals. Another law is the Regulation (EU) 2019/1240 of the European Parliament and the European Council of 20 June 2019.
The IND must also be able to share personal data with law enforcement authorities, foreign authorities and within networks of immigration liaison officers. The IND only does this if those personal details are necessary for the following purposes:
- implementation of the Aliens Act,
- prevention and tackling of irregular migration, or
- prevention, investigation, detection and prosecution of migrant smuggling or human trafficking.
The AVG applies to such processing of personal data. This means that:
The IND does not store personal data for longer than necessary for the purpose for which the IND has collected it. The retention periods are laid down in the archive policy. How long personal data are preserved, varies per situation and also depends on the purpose of storage. This period can be a few weeks to many years.
The Minister of Justice and Security has a duty of care (that is an administrative responsibility) to keep the archive of the IND in order and to ensure that there is access to the archive. It is stated in Article 3 of the 1995 Archive Act.
The Minister of Justice and Security has made selection lists. This is stated in Article 5 of the 1995 Archive Act. The selection lists state how long the IND must keep its archives and whether the IND may destroy an archive after a certain time.
The following selection lists are made for the IND:
These selection lists are published in the Dutch Government Gazette.
The archives of foreign nationals who remain for indefinite period are preserved forever.
From 1990, the archives of foreign nationals with a residence permit for a limited period are preserved for 15 years. The retention period starts on the departure date.
The archives of foreign nationals who acquire Dutch nationality are preserved forever. These archives are an important source of information for immigrants and their descendants about their arrival in the Netherlands.
These retention periods have been determined after advice from the Dutch Council for Culture. The selection list has been formally determined by the Minister of Education, Culture and Science and the Minister of Justice.
The managing director of the IND determines the archive policy on behalf of the Minister of Justice. This is stated in Article 14 of the Archive Decree and Article 3 under 5 of the Justice and Safety archive management rules. When drawing up a selection list, the managing director must involve the State archivist and an external expert. The final retention period is determined by considering a number of interests. Privacy is one of these interests.
The entire archive of the IND and its predecessors over the period from the end of the 19th century to 1986 was transferred to the National Archive (NA). Documents from this period can be requested by submitting a request via this contact form. A file number must be stated in this request.
On 25 May 2018 the General Data Protection Regulation (GDPR) became effective. This means the IND wants to handle persons information as carefully as possible. To do this we also need your help.
Persons details of customers should only be accessible by that person and not by others. This of course does not apply when the customer has a parent or legal representative.
In that case, please add a declaration of permission to the application or documents. This declaration clearly states that your client gives permission to use these documents and, therefore, the documents may be added to the file of this customer. We do wish to inform you that Archive Law applies tot he file of the customer.
We thank you for your co-operation to be as carefully as possible with the personal details of our clients.
Regarding your personal data, you have the right:
You also have the right to object to processing of your personal data.
Do you want to use these rights? Click the button and fill out the form.Request for documents (Dutch only)
Or send a letter to:
ter attentie van Privacy Officer
9560 AA Ter Apel
Your letter should contain:
You will receive a response to your request within a month. This period can be extended by two months. This happens when the IND needs more time.
It is the right to view your personal data at the IND. Your family members may only view your file if you have given them written permission (authorisation). Parents and legal representatives may view the file of their children under the age of 16. Persons who are 16 years or older, decide about inspection (permission hereto) personally. The IND may (partially) refuse inspection of your own file if your inspection damages the privacy of someone else. Surviving relatives are not entitled to inspect the file of someone who has died.
Do you think that your personal data are no longer correct or complete? Then you can ask the IND in writing to adjust the data. If we do not change the data, we will clearly explain why we don't.
You can ask the IND to delete (part of) your data from the file. If we do not delete the data, we will clearly explain why we don't.
The IND does not use automated decision-making without human intervention. This means that an employee always looks at the case.
Do you have any questions, do you want more explanation or are you not satisfied with how the IND handles your personal data? Then contact our Privacy Officer.
You can file a complaint by using this complaint form. Or send a letter to:
9560 AA Ter Apel
Are you not satisfied with the answer to your complaint? Then you can submit a complaint to the Dutch Data Protection Authority. This is possible via the website: www.autoriteitpersoonsgegevens.nl.
The IND is an implementation organisation of the Ministry of Justice and Security. The State Secretary for Justice and Security is responsible for the work of the IND. The Data Protection Officer of the Ministry of Justice and Security checks whether the IND applies and complies with the General Data Protection Regulation (AVG). This official is formally the point of contact for processing of personal data within the ministry.
The legislation and our services are not standing still. We closely follow these developments and adjust our organisation as well and as quickly as possible. This can also have consequences for the way we handle personal data. We therefore adjust the Privacy Statement. For this reason, read our Privacy Statement regularly. We will inform you of major changes.
We updated this Privacy Statement last on 15 January 2020.
The Immigration and Naturalisation Service (IND) regularly exchanges basic personal details with its partners.
The IND respects the privacy of its clients. It is important to us that our processes are transparent, clear and reliable. Therefore, we carefully handle personal details and ensure that every time they are processed this is done in accordance with the applicable laws and regulations.
We assume that our partners handle personal details in accordance with the AVG, in the same way as indicated above.