Dutch Spy Agencies Accused of Using Citizens’ Data to Train AI

Dutch spy agencies are facing renewed criticism after a government watchdog found they failed to properly protect large collections of citizens’ personal data.

The findings have prompted digital rights group Bits of Freedom (BoF) to warn that the information may be used to train artificial intelligence models. The organization argues the intelligence services have repeatedly mishandled sensitive data while seeking greater surveillance powers.

Dutch Spy Agencies Failed to Protect Personal Data

The concerns follow a report published by the Review Committee on the Intelligence and Security Service (CTIVD).

The watchdog concluded that the General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD) have not adequately safeguarded bulk datasets containing citizens’ personal information.

The datasets reportedly include names, phone numbers, email addresses, location information, social media activity, and private communications.

According to the report, too many employees can access the data. They also retain access for too long. In some cases, the information is used for purposes beyond those originally intended.

CTIVD Chairman Hugo Hillenaar said processing bulk datasets inevitably affects people’s privacy. He noted that most individuals included in the databases have no connection to espionage or terrorism. He added that proper safeguards must therefore be in place.

Rights Group Raises AI Training Concerns

Bits of Freedom believes the report points to a wider problem.

The organization claims Dutch spy agencies appear to be training their own AI models using citizens’ personal data. It also alleges the agencies may be purchasing datasets that originated from previous data breaches.

BoF questioned why intelligence services would acquire information exposed through cyber incidents when they are expected to protect citizens from such threats.

Unlike private companies, intelligence agencies do not allow people to opt out of data collection. BoF also argues the services are not permitted to train AI using citizens’ personal information.

Watchdog Says Problems Are Not New

The civil rights group noted that this is not the first time Dutch spy agencies have faced criticism over data handling.

In 2020, the CTIVD found that the AIVD and MIVD kept information on millions of citizens for far longer than permitted under Dutch law.

According to BoF, the latest findings suggest the agencies have failed to address the shortcomings identified several years ago.

Calls Grow for Stronger Oversight

The report has renewed calls for stronger oversight of Dutch spy agencies.

BoF argues independent supervision is essential because intelligence services operate largely in secret. Effective oversight, it says, allows both lawmakers and the public to understand how surveillance powers are being used and to hold agencies accountable.

Executive Director Evelyn Austin warned that the intelligence services continue to seek broader powers despite ongoing problems with data management.

She said the agencies have failed to manage the powers they already possess and have resisted legal oversight. For that reason, she argued, supervision should be strengthened rather than weakened.