Doxing
Doxing is the collection or disclosure of someone else's personal data for the purpose of scaring or harassing that person. For example, by posting a home address or telephone number online. Doxing is punishable.
On this page
Personal information
In a case of doxing, someone shares information about someone else, for example in a WhatsApp group or on the Internet, without asking the person concerned for consent. This often concerns highly personal information that not just everyone knows. It may also concern information that is already public in other places. For example on social media, or in government registers such as the Land Registry and the Commercial Register. Or information originating from sites that publish data obtained from a data breach.
Major impact
Doxing is a gross violation of a person’s privacy. It can happen to anyone. Not only if, for example, you are a Dutch celebrity, or the subject of an act of revenge by an angry ex.
The unsolicited publication of someone’s data is a form of intimidation and often has a major impact on someone’s life. Such as threats, no longer being able to do your job, stalking or other forms of nuisance.
Doxing is punishable
Doxing is a violation of the General Data Protection Regulation (GDPR). Publishing personal data without consent is usually not allowed. Certainly not if it is done with the intention of harming a person. The Dutch Data Protection Authority (Dutch DPA) supervises compliance with the GDPR and can forbid a publication or have it removed. The Dutch DPA can also impose a fine on the perpetrator.
On 1 January 2024, a special law on doxing came into effect, ensuring that victims can immediately report the incident to the police. Furthermore, perpetrators can be prosecuted and, for example, be given a prison sentence.
Help when faced with doxing
People who are faced with doxing can do several things. They can contact the police, so that the perpetrator can be prosecuted. Alternatively, they can submit a complaint to the Dutch DPA. Besides, there are various organisations that support victims. Rijksoverheid.nl contains more information for victims of doxing. Here they can also read what they can do about it.
Also view
Privacy story
Emma (28) wants her telephone number removed from the Internetbecause of her ex. "My number just has to be taken off that site, now!"
Privacy story
John van den Heuvel’s home address ended up on the Internet. “I can see that the crime world is increasingly focusing on cyber theft.”
Privacy rights under the GDPR
Mensen hebben een aantal privacyrechten. Zij kunnen organisaties bijvoorbeeld vragen om hun gegevens te rectificeren (wijzigen) of te verwijderen. Zo houden mensen controle over hun persoonsgegevens. Lees meer over privacyrechten.