Insurance EVR registration: access, removal and legal help

1. Establish what is actually registered

An entry in the CIS database is not automatically a fraud registration. CIS distinguishes ordinary claim notifications from EVR entries. A claim notification may exist regardless of fault or whether the policy covers the damage. Identify the type of entry before treating every result as the same problem.

Keep the registration letter and complete overview. Note the reference, registering organisation, start and end dates and disputed information. If you only have a refusal of new insurance, ask what that refusal relies on. Do not present an assumed registration as an established fact. Internal records also require a different assessment from external referral data.

2. Request access through the appropriate channel

You can obtain your own insurance registrations from CIS. Its published routes include a WebApp using Yivi identification and a postal procedure; business records have separate instructions. Check the current procedure and include relevant former addresses. Complete the submission and retain confirmation so you know what was actually received.

Also ask the insurer for your personal data and the information needed to understand its decision. Identify the decision and missing justification. Access does not automatically mean unrestricted disclosure of every internal document; limitations may apply. Request written reasons for withholding information. Use the designated secure identification channel and avoid sharing unnecessary personal details.

3. Check the grounds and applicable protocol

The NVB states that PIFI 2026 took effect on 1 April 2026. For an older decision, establish which framework applies to the original decision and continued registration. Do not rely on an old example or the protocol version mentioned in an undated article. Keep the version relied on by the insurer and the date of its decision.

PIFI 2026 requires threatening conduct, sufficiently established involvement and proportionality for external registration. Kifid also describes a demanding threshold for external fraud entries. Ask which evidence supports your involvement and explain what you dispute. Dissatisfaction alone does not substantiate your case. Distinguish inaccurate personal details from disagreement over the assessment of otherwise accurate facts.

4. Substantiate proportionality and duration separately

A lawyer can assess whether both the entry and its duration are proportionate. Document concrete consequences rather than saying only that registration is inconvenient. Examples include a written refusal, changed terms or a demonstrable obstacle to necessary cover. Explain when each consequence arose and what links it to this entry.

PIFI 2026 sets an outer limit of eight years after the relevant information enters the Incident Register, subject to a new qualifying reason. That ceiling is not an automatic standard duration: proportionality must be assessed. Ask which circumstances determined your period and whether changed circumstances justify reassessment. Another person's successful case does not prove your own interests.

5. Address removal to the registering insurer

For EVR correction, CIS refers you to the insurer identified as the handling party. The ordinary CIS correction form is not the appropriate route. Send that insurer a reasoned request identifying the entry. Specify whether you seek correction of factual details, removal, restriction or reconsideration of duration; these do not necessarily produce the same result.

Use numbered grounds and an attachment list. For each ground identify the disputed fact or assessment and the supporting record. Request a written decision on every point. Ask an adviser which privacy rights and contractual objections apply. A privacy request does not mean data must always be erased: lawful grounds for continued processing may exist.

6. Monitor the response and next procedure

PIFI 2026 normally provides one month to respond to access, correction or erasure requests. Complexity or the number of requests may justify a further two months, with notice within the first month. The Dutch AP likewise explains that erasure is conditional and refusals need reasons. Preserve your request, its receipt date and every response.

If refused or unresolved, obtain advice on the appropriate route. The protocol identifies the institution's management, followed by options including Kifid, the AP or the competent court; SKGZ may be relevant for health insurance. Jurisdiction and deadlines differ. Following an adverse privacy decision, promptly check court deadlines and the effect of other proceedings instead of waiting indefinitely for another complaint letter.

The starting point for the special petition procedure under article 35 UAVG is to file the petition within six weeks after receiving the data controller’s reply. If the controller does not reply within the applicable AVG response period, this provision does not subject filing to that six-week deadline. In HR 2023:1216, the Hoge Raad clarified that a repeated privacy request may be possible after a missed deadline and that interim proceedings may be assessed separately where there is an urgent interest. A repeated request may nevertheless be refused as manifestly unfounded or excessive if that refusal is substantiated. Do not use these possibilities as a reason to let a current deadline expire; have the specific route and receipt dates assessed immediately.

7. Fictional example: distinguish grounds from consequences

Suppose an insured person receives an EVR decision after a dispute about a purchase document. She disputes the allegation and later obtains an insurance offer only on changed terms. She collects both original purchase records and the written new terms. They address different issues: the grounds for registration and its consequences.

A useful request treats both separately and asks why this particular duration was selected. A lawyer can identify missing evidence and the suitable procedure. This fictional example does not predict that more expensive cover warrants removal. Any agreement should expressly address EVR, internal data and the insurance claim; payment alone does not resolve every registration question.

8. Checklist for your lawyer

Organise the file before the appointment and identify pending applications or urgent problems. Ask which facts need evidence, which deadline requires immediate action, and the costs and litigation risks. Agree the scope so that examining one register is not mistaken for challenging every decision.

• Registration letter, access results, references and start and end dates.
• Investigation report, original statements and evidence supporting your challenge.
• Written consequences, including refusals or different insurance terms.
• Requests, delivery confirmations and responses concerning access or removal.
• Separate list of EVR, internal records, policy decisions and claim issues.