The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) has imposed fines totaling €250,000 on ten municipalities. The reason is that they processed files containing sensitive information about Islamic residents without the residents’ knowledge. In doing so, the municipalities violated the General Data Protection Regulation (GDPR). They were not authorized to possess this information. The municipalities also processed data regarding people’s religion and political preferences, which is almost always prohibited, the AP reports.
PILP has assisted mosques in various cities in response to these secret investigations conducted by municipalities. Earlier, the District Court of Midden-Nederland ruled in a case brought by PILP on behalf of a mosque that the investigation in Veenendaal was unlawful and violated fundamental rights. In Delft, PILP also supported the mosque in legal proceedings. On 12 February 2025, the District Court of The Hague ruled that the Municipality of Delft had to provide access to the investigation report. According to the court, the mosque had sufficiently demonstrated that the investigation infringed upon the mosque’s fundamental rights, without there being any legal basis for it.
Yesterday, the Municipality of Delft published a statement expressing regret to the mosque and acknowledging the unlawfulness of the investigation. The Al Ansaar mosque is pleased to be able to close the case in this way. The acknowledgment marks a new start in cooperation with the municipality.
PILP handled this case in cooperation with Paul Tjiam and Mathijs Theodoridis of Simmons and Simmons LLP. More information about the case can be read here.


