ACM and the Dutch DPA take action against StemWijzer.nl

The Netherlands Authority for Consumers and Markets (ACM) and the Dutch Data Protection Authority (the Dutch DPA) have contacted the webmaster of StemWijzer.nl, a Dutch voting advice website, regarding the use of advertisement cookies and the security of the website. Following that conversation, StemWijzer.nl immediately removed the advertisement cookies. In addition, the Dutch DPA has urged StemWijzer.nl to review the security of its website. The Dutch DPA will be keeping a close watch on this. The next Dutch general election will be held on March 15.

Advertisement cookies

Websites that want to store or access advertisement cookies are only allowed to do so after visitors have been informed about such cookies, and after they have consented to them. StemWijzer.nl failed to obtain this consent, and thus acted in violation of the Dutch Telecommunications Act (Section 11.7a). Since StemWijzer.nl also processes data about the political preferences of visitors via its website, it deals with sensitive personal data. StemWijzer.nl is only allowed to process such data for advertisement purposes if visitors have explicitly consented to this.

The security of the website

ACM and the Dutch DPA contacted StemWijzer.nl following public concern about the security of its website. It will be checking whether the webmaster will take appropriate measures.

It is of great importance that people do not feel spied on when filling out detailed questions about their political preferences, and that such information is not stored any longer than strictly necessary. This issue affects the principle of secret voting. People must be able to exercise freely their voting rights. The parties that are most likely to get your vote should also remain secret, so that everyone is able to indicate freely their preferences and needs.