No, the government is usually not allowed to do that. The government is, for example, your municipality or the UWV. If an organisation asks you for consent, you must also be able to say ‘no’, and that can be difficult with the government because you often need something from the government, such as a facility like a stair lift or benefits. So you are dependent on the government.

It is usually not necessary for the government to ask you for consent to use or share your data, because the law often states that the government is allowed to do so.

Sometimes, the law states nothing on the subject, but a government organisation still wants to share your data, because it turns out you need help. The organisation will then transfer your details to other organisations, where you can receive help. Organisations that you are unable to find yourself.

In such a case, it may be allowed. However, the organisation must explain to you clearly:

• which data of yours are shared by the organisation;
• why it does so (for what purpose);
• how that works.

You must also be given some time to decide whether you give consent for this. And, of course, you can always refuse.

Want to know more? Then read Consent and the government.

No, consent is usually not a valid legal basis for administrative bodies to process personal data of citizens. However, as a benefits agency you may find yourself in a situation in which asking for consent is desirable: you want to ensure that people in a vulnerable position get help from other organisations. In that situation, valid consent from an administrative body may sometimes still apply.

Yes, you can. If an organisation uses your personal data, you have a number of rights. This will ensure that you keep a grip on your personal data. These are the most important privacy rights:

• You have a right of access to your personal data.
• Does it turn out that data of you are incorrect? Or that certain data are missing? Then you can ask for rectification of your data (adjustment or addition).
• In some cases, you can also ask for erasure of data.

Do you want to know what other rights you have? Check out Privacy rights under the GDPR.

Always submit your questions or complaints to the organisation that uses your personal data first. Do you have a complaint and are you and the organisation unable to work it out together? Then you can lodge a complaint with the Dutch Data Protection Authority (DPA).