Passport and identity card
Sometimes it is necessary for organisations to establish the identity of people. For example, for the prevention of fraud. Or because they have a legal obligation to do so. There are several ways in which someone's identity can be established. This may require the passport or identity card of that person, but that is not always the case. In which way and when this is allowed depends on the applicable law and the necessity.
On this page
There are strict rules for what organisations are allowed to do with the identity document of people, such as their passport or identity card. Because an identity document contains several data that organisations need to handle with extra care. Failure to do so will result in privacy risks. In any case, organisations are not allowed to ask for or make a copy, scan or photo of someone's identity document without a good reason.
Quick answers
Is my bank allowed to make or ask for a copy ID?
Yes, this is allowed. When you become a customer, your bank has to check your identification document (ID) to verify whether you really are who you say you are (identification). And sometimes, this has to be done again if you are already a customer (re-identification). When doing so, your bank is allowed to make a copy ID or ask you to prove that your identity has been checked.
More information
Read the detailed explanation: Identification at your bank.
Can I access my data at an organisation, or have them rectified or removed?
Yes, you can. If an organisation uses your personal data, you have a number of rights. This will ensure that you keep a grip on your personal data. These are the most important privacy rights:
- You have a right of access to your personal data.
- Does it turn out that data of you are incorrect? Or that certain data are missing? Then you can ask for rectification of your data (adjustment or addition).
- In some cases, you can also ask for erasure of data.
Do you want to know what other rights you have? Check out Privacy rights under the GDPR.
What can I do if I have a question or complaint about the use of my personal data?
Always submit your questions or complaints to the organisation that uses your personal data first. Do you have a complaint and are you and the organisation unable to work it out together? Then you can lodge a complaint with the Dutch Data Protection Authority (DPA).
