RIS matching / Early detection of debts

Municipality of Rijswijk

The RIS matching algorithm detects payment arrears among residents and matches them with data to identify at-risk groups for problematic debts. It supports early signalling and debt relief by revealing debt risks in a timely manner so that the municipality can provide preventive help in time. It identifies payment arrears at utility companies

Last change on 27th of January 2026, at 11:36 (CET) | Publication Standard 1.0

• Publication category: Impactful algorithms
• Impact assessment: DPIA
• Status: In use

General information

Theme

Field not filled in.

Begin date

2021-01

Contact information

[e-mail]

Responsible use

Goal and impact

The RIS matching algorithm aims to automatically detect arrears of residents and link them to groups at risk of debt problems. The algorithm enables early detection of signs of problematic debts so that the municipality can offer timely preventive help. This helps prevent escalating debts and promotes a proactive approach in debt assistance.

Considerations

Early detection of debt based on third-party signals has become a statutory duty for municipalities. A Data Protection Impact Assessment (DPIA) has been carried out - a privacy test that helps to identify and mitigate risks when processing personal data. The DPIA shows that the interests of the data subject must be in equal proportion to the interests of the person responsible for processing data. No more information should be requested and processed than is strictly necessary for the processing

Human intervention

Based on signals, an advice for a follow-up action follows. A staff member reviews the advice and checks the data. The staff member then initiates a follow-up action. This could be a home visit, telephone contact or a letter.

Risk management

The registration and information system called 'RIS Matching' is provided by the company Inforing, a company that supplies this system to 200 municipalities. They regularly carry out so-called 'pen and hack tests' to check that the system cannot be hacked by third parties. They also ensure that personal data is securely managed and not sold to third parties. Security also lies with Inforing. The security meets the BIO standard.

Legal basis

The Municipal Debt Relief Act, amended since 1 January 2021, allows designated creditors to report payment arrears. By sharing this data, signals of debt problems reach the municipality earlier. This allows us to actively offer help to prevent increases in debt.

Links to legal bases

Municipal Debt Relief Act: https://wetten.overheid.nl/BWBR0031331/2026-01-01/0

Impact assessment

Data Protection Impact Assessment (DPIA)

Operations

Data

Creditors make their notification of arrears in a specially developed registration and information system called 'RIS Matching'. The data in this dataset are all data needed to address the right citizen, find the right care provider and provide advice on which help the citizen would benefit most. Only health insurers have a legal basis (Government Gazette 2015) for supplying the BSN, the other creditors do not supply a BSN.

The creditor can provide the following information with the notification:

• Customer number
• Early or crisis
• Debt amount
• Term Amount
• Gender
• Pre-letters
• Prefix
• Surname
• Street
• House number
• House letter
• House number or suffix
• Postcode
• City
• BSN (in case of health insurance)
• Date of birth

Additional information (e.g. which 'label' someone is insured with. The main label is Achmea, but someone may be insured with Zilveren Kruis, Avero, FBTO, for example. Also include contact details such as telephone number or e-mail address if known).

External provider

Xxllnc