- Dutch government repeatedly violates its own mandatory rules for cloud, AI, and algorithm use.
- Two-thirds of government IT projects in the cloud lacked any risk assessment, and fallback plans almost never work in tests.
- Special category personal data (GDPR Article 9) is sent to US clouds without required extra encryption, violating regulations.
- Senior officials like Hugo de Jonge use private Gmail for work, with widespread tolerance for rule-breaking.
- Police have illegally retained data for 20 years despite court rulings; intelligence agencies act similarly.
- Systemic issue: no malicious intent, but a lack of interest or capacity to follow rules, treating government like a business.
- Individuals cannot stop this alone; focus on delaying, documenting violations, and building opposition through councils and unions.
- Media and whistleblowing are often ineffective; the system's purpose is its actual behavior, not its stated intentions.