Penalty order and processing of personal data

As sending the Penalty Order and collecting the amount is a statutory task of the CJIB, our role for this task is that of controller.

What personal data do we process?

To collect a Penalty Order, we need to process personal data. We receive these data from various organisations. The data we can process for this task include:
•    Your citizen service number (BSN)
•    Your IBAN
•    Your full name
•    Your address, postal code and town/city
•    Your date of birth
•    Your place of birth
•    Details about the penalty order. These are, for example, the date of the offence and information about the established offence.
•    Details about your vehicle
•    Payment details for the penalty order.
•    Your driving licence number
•    Information on whether you can pay in instalments

With whom do we share data?

We only share data with other parties if necessary.

If someone has to receive a penalty order because an offence has been committed with a vehicle, we share the vehicle registration details with the foreign authority responsible for vehicle registrations. This authority will then provide the details of the person to whom the vehicle is registered.

If you do not pay the outstanding amount of the Penalty Order on time, we will transfer the case to the Public Prosecution Service.

How long may we retain your data?

Among other things, this depends on why you were given the penalty order and the punishment you received. The retention periods are stated in Articles 4 and 6 of the Judicial Data and Criminal Records Act.