Citizen Service Number (BSN)
The citizen service number (Dutch BSN) is a unique personal identification number that is intended for the contact between citizens and the government. Organisations outside the government are only allowed to use the BSN if there is a law that says so. This applies, for example, for organisations in healthcare and education.
On this page
Privacy risks of BSN
The BSN is a sensitive personal data. Information from different files can be linked easily using the BSN. For that reason, careless use of the BSN results in privacy risks. For example, abuse of personal data and identity fraud.
Blocking the BSN on a copy of the identification document
Does an organisation ask for or make a copy, scan or photo of your passport or identity card? But is this organisation not allowed to use your BSN? Make sure then that you render your BSN illegible. In this way, you prevent unnecessary dissemination of your BSN.
Quick answers
Am I, as an organisation, allowed to use test BSNs?
Yes, you are. You are allowed to use fictitious (made-up) citizen service numbers (BSNs) for testing your information systems.
Which organisations are allowed to use DigiD?
Organisations that are allowed to use your citizen service number (BSN) are also allowed to use your DigiD.
You can use your personal DigiD (user name and password) for identifying yourself. You can then, for example:
- apply to your municipality for a permit or an extract;
- file your tax return;
- submit an expense claim to your health insurer.
Do you want to view your personal data registered with your DigiD? You can do this through the DigiD website.
Can I access my data at an organisation, or have them rectified or removed?
Yes, you can. If an organisation uses your personal data, you have a number of rights. This will ensure that you keep a grip on your personal data. These are the most important privacy rights:
- You have a right of access to your personal data.
- Does it turn out that data of you are incorrect? Or that certain data are missing? Then you can ask for rectification of your data (adjustment or addition).
- In some cases, you can also ask for erasure of data.
Do you want to know what other rights you have? Check out Privacy rights under the GDPR.
What can I do if I have a question or complaint about the use of my personal data?
Always submit your questions or complaints to the organisation that uses your personal data first. Do you have a complaint and are you and the organisation unable to work it out together? Then you can lodge a complaint with the Dutch Data Protection Authority (DPA).
