RIVMNational Institute for Public Health and the Environment
is required to ask you for a copy of your ID card, passport or driving licence. You can use the KopieID app for your smartphone for this purpose. This app was created by the Netherlands Ministry of the Interior and Kingdom Relations.
RIVM uses the copy of your ID exclusively to verify your identity, and then deletes that copy immediately.
Right of inspection
You always have the right to inspect the data that we have received from you and about you in this context. A request to inspect your record is free of charge. Are you authorised to request access someone else’s data? Then we will ask you for proof of authorisation.
You can view your Covid-19 vaccination record digitally at MyRIVM vaccinations.
Go to the web form for right of inspection.
Right of rectification / change in your data
Is something incorrect in your data as stored by RIVM? Then you can request a change (rectification). Let us know which data you would like to change.
Note: Would you like to report a change of address? You can change your registered address at the municipality where you will be living. That change will then be automatically processed in our system.
Right of erasure
Would you like to delete all or part of your data as stored by RIVM? Then you can exercise your right of erasure, also known as ‘the right to be forgotten’. In that case, if you request it, we will delete your data. Please specify which data you would like to have deleted. You have the right to have personal and medical data removed from the system in which we record your vaccination records.
Please note: RIVM is legally required to retain some data. If RIVM cannot comply with your request, we will let you know. We will also let you know how long RIVM will retain your data.
Note: Would you like to have your personal and medical data removed from the system? Please take into account that your data will then be permanently deleted. You will no longer be able to access your COVID-19 vaccination records at a later date.
Go to the web form for right of erasure.
Right of objection
If you did not give your care provider permission to share your vaccination data with RIVM, but your details are still listed in the RIVM system, then contact your own care provider. Your care provider will ensure that your data as stored by RIVM is deleted.
RIVM links your vaccination data to your details in the Personal Records Database (BRP). This is how we can be sure that we are matching the right vaccinations to the right person. Do you object to the use of your personal data from the Personal Records Database? Then you can submit an objection. In that case, RIVM will no longer retrieve your personal data from the BRP database. Your vaccination data will then be stored anonymously.
Note: You will no longer be able to access your COVID-19 vaccination records at a later date. Once that is done, we can no longer link your vaccination data to your personal data.
Go to the web form for right of objection.
Right of restriction of processing
If you exercise your right to restriction of processing, RIVM must temporarily stop using your data. However, RIVM is not allowed to delete your data either.
The right to restriction of processing applies in the following cases:
- If your data as stored by RIVM may be incorrect. Have you indicated that RIVM has incorrect data about you? In that case, RIVM must first check your data.
- If RIVM no longer needs your personal data for the purpose for which the data was collected. However, you do not want RIVM to delete your data, because you still need the data for a legal claim.
- If you have exercised the right of objection.
Waiving participation in COVID-19 vaccination
Would you rather not take part in COVID-19 vaccination? Then you can ask RIVM not to send you an invitation for the vaccination. If you do want a COVID-19 vaccination later on, you can ask RIVM to send you an invitation for vaccination after all.
Questions, requests and complaints
Do you have questions about the GDPR? Or would you like to submit a complaint? In that case, please contact the Dutch Data Protection Authority.