Please note: The algorithm descriptions in English have been automatically translated. Errors may have been introduced in this process. For the original descriptions, go to the Dutch version of the Algorithm Register.

Signal abuse and improper use DigiD: Possible unlawful use of DigiD

The algorithm consists of several triggers, with all triggers following the same step-by-step plan and a fixed sequence. The algorithm issues a signal indicating whether possible abuse or improper use is taking place with DigiD.

Last change on 27th of September 2024, at 12:33 (CET) | Publication Standard 1.0
Publication category
Impactful algorithms
Impact assessment
DPIA
Status
In use

General information

Theme

Law

Begin date

03-2021

Contact information

https://logius.nl/contact/formulieren/algemeen-contactformulier

Link to publication website

Privacy | DigiD

Responsible use

Goal and impact

The purpose of the algorithm is to protect DigiD users from abuse or improper use by quickly signalling whether DigiD is being misused. The signal given by the algorithm is a starting point for an investigation. If a DigiD is actively being abused, it can be revoked, suspended or blocked. This prevents further abuse. After revocation, citizens can apply for a new DigiD. A suspension or block can be lifted.

Considerations

The added value of this algorithm, is to identify and prevent abuse and improper use of DigiD. The confidentiality, availability and integrity of the data used are not violated. By law, the authority of Logius is established to signal abuse and improper use of DigiD.

Human intervention

The algorithm sends a signal. No automated follow-up takes place. The signal that goes off is the basis for (potentially) starting an investigation into the observed activity. Review and judgment follows an investigation conducted by several analysts. Depending on the outcome of the investigation, action may be taken to revoke, suspend or block DigiD. The citizen is always informed when the DigiD account is revoked, suspended or blocked.

Risk management

When a signal goes off it means further investigation is necessary. Not in all cases when the signal goes off there is abuse and improper use. Further investigation should always show that. The algorithm is evaluated at least every 6 months for usefulness, necessity and functioning.

The investigation into abuse and improper use consists of an analysis of DigiD use. Built into the process is that at least three people are involved in the investigation to avoid assumptions as much as possible. The maximum risk of the algorithm is that someone's DigiD is revoked, suspended or blocked. After a DigiD is revoked, the citizen is able to apply for a new DigiD and a suspension or blocking can be lifted.

Legal basis

Digital Government Act

Impact assessment

DPIA: https://www.logius.nl/domeinen/toegang/digid/documentatie/gegevensverwerkingen-digid

Operations

Data

The following data is used in running the algorithm;

  • A BSN that can be used to identify a person
  • Usage data, including the IP address, successful and failed authentications
  • Application data, including a unique app code (DigiD App instance_id) and a service provider identifier (Webservice_id)

Similar algorithm descriptions

  • The algorithm uses sensor data to make a calculation for predictions of slipperiness risks. These predictions are used to determine where to grit (preventively), in consultation with meteorologists. In addition, the algorithm can issue various alarms, for example when there is a chance of wet road sections freezing.

    Last change on 10th of July 2024, at 8:18 (CET) | Publication Standard 1.0
    Publication category
    Other algorithms
    Impact assessment
    Field not filled in.
    Status
    In use
  • This algorithm helps the ACM find price announcements in messages that might say something about tacit or explicit alignment. This information by itself does not trigger action, but it can be a reason for inspectors to further investigate a possible infringement.

    Last change on 4th of October 2024, at 13:36 (CET) | Publication Standard 1.0
    Publication category
    Other algorithms
    Impact assessment
    Field not filled in.
    Status
    In use
  • This algorithm can give the ACM insight into trends, developments and potential problems that exist in the digital market. This information in itself does not trigger action, but it can be a reason for inspectors to further investigate a potential infringement.

    Last change on 4th of October 2024, at 13:35 (CET) | Publication Standard 1.0
    Publication category
    Other algorithms
    Impact assessment
    Field not filled in.
    Status
    In use
  • This algorithm predicts when a paper container needs to be emptied. Based on this, it determines the driving route for the drivers emptying the containers.

    Last change on 29th of February 2024, at 18:59 (CET) | Publication Standard 1.0
    Publication category
    Other algorithms
    Impact assessment
    Field not filled in.
    Status
    In use
  • The algorithm detects and selects text from notarial deeds for monitoring the correct registration of the notarial deed and levying and collecting taxes.

    Last change on 25th of June 2024, at 10:22 (CET) | Publication Standard 1.0
    Publication category
    Impactful algorithms
    Impact assessment
    DPIA
    Status
    In use