Summary

SyRI was a Dutch government inter-agency data-linkage system for detecting welfare, tax and social-security fraud, established by an amendment to the Wet SUWI (adopted 9 October 2013, in force 1 January 2014). It produced risk signals for addresses within designated operational areas by cross-referencing data from six agencies. Deployments were documented in four municipalities between 2016 and 2019, including Rotterdam's Hillesluis and Bloemhof districts (2018). The State admitted at hearing that SyRI had only ever been applied to so-labelled "problem districts."

On 5 February 2020 the District Court of The Hague ruled SyRI's statutory basis contrary to Article 8 ECHR, for failing the fair-balance test and for insufficient transparency. The system was halted; records persisted in agency databases after the halt. A comparable system would likely fall under the prohibitions in Article 5 of the EU AI Act, which apply from 2 February 2025.

Mechanism

Parameter-based risk scoring across pooled inter-agency data produced district-level risk reports ("risicomeldingen") that were passed to intervention teams working neighbourhood by neighbourhood. District selection correlated with demographic composition (lower socio-economic status, immigration background); the court found this pattern carried a risk of discriminatory effects, intentional or otherwise. Affected residents were typically unaware they were being scored.

Scale

About 25,000 residents lived in Hillesluis and Bloemhof at the time of the 2018 deployment, which flagged 1,263 addresses (both figures assessed as probable). Across the four documented district deployments of 2016–2019 the affected population is estimated at about 135,000.

Oversight and remedy

A coalition of civil-society organisations and the trade-union federation FNV filed suit in 2018; the UN Special Rapporteur on extreme poverty filed an amicus curiae brief in September 2019; Rotterdam's mayor halted the local deployment in July 2019. The court's 2020 ruling held the statutory provisions to have no binding effect. On adjacent infrastructure (the tax administration's FSV blacklist), the Dutch data-protection authority published an investigation in 2021 and fined the tax administration €3.7M in 2022. No successor system was legislated.