Dutch Data Protection Authority issues record fines to government agencies. The Tax and Customs Administration has been penalized with a fine of 3.7 million euros ($4 million) for several counts of GDPR violations. The tax authorities received this fine because of the years of illegal processing of personal data in the Fraud Signaling Facility (FSV) The list, maintained for more than six years, contained entries for approximately 270,000 individuals, according to the DPA. The DPA considers these to be serious violations of the General Data Protection Regulation.”]
Source: https://www.databreachtoday.com/dutch-government-agencies-fined-serious-gdpr-violations-a-18896