Dutch Pro Justitia Reports as Data Processing Operations GDPR, Wpg, Wjsg, and Article 8 ECHR Constraints on NIFP Forensic Psychiatric Reporting in the Netherlands

A pro Justitia forensic psychiatric report is, in addition to its evidentiary status within Dutch criminal proceedings, a data processing operation in the technical sense of the General Data Protection Regulation. It involves the collection, organisation, storage, evaluation, and disclosure of personal data, including the special categories of sensitive data — health data under Article 9 GDPR and criminal-conviction-and-offence data under Article 10 GDPR — and routinely incorporates personal data concerning third parties who are not the subject of evaluation. This article argues that the data-protection dimension of NIFP-affiliated pro Justitia practice has been systematically under-theorised in Dutch academic literature and is, on the doctrinal analysis developed below, in significant tension with both the GDPR architecture and the European Court of Human Rights jurisprudence on Article 8 ECHR concerning the State-led processing of sensitive personal data. The argument proceeds through the GDPR’s lawfulness and special-category-data architecture, the lex specialis operation of the Wet politiegegevens (Wpg) and the Wet justitiële en strafvorderlijke gegevens (Wjsg) as the Dutch transposition of the Law Enforcement Directive (Directive 2016/680), and the ECtHR jurisprudence developed in Z v. Finland (1997), M.S. v. Sweden (1997), I v. Finland (2008), L.H. v. Latvia (2014), Y.Y. v. Russia (2016), Surikov v. Ukraine (2017), Avilkina v. Russia (2013), and S. and Marper v. United Kingdom (Grand Chamber, 2008), supplemented by the Court of Justice of the European Union’s jurisprudence on sensitive-data processing in criminal-justice contexts. Specific attention is given to four structural concerns: the routine inclusion of third-party material concerning persons other than the subject of evaluation; the operation of mandate-drift as a purpose-limitation breach under Article 5(1)(b) GDPR; the onward disclosure of forensic reports through parket channels and beyond; and the storage-limitation problems generated by indefinite retention of sensitive data within NIFP files. The article concludes with a structured complaint framework for the Autoriteit Persoonsgegevens (AP), with attention to parallel civil and criminal remedies under Dutch law. The pending criminal proceedings under parket nr 18-104657-25 before the Rechtbank Noord-Nederland, locatie Leeuwarden, in which a pro Justitia report by Mw. V. Rama, forensisch psychiater at the NIFP, dated 20 November 2025, has been deployed in proceedings that include a regiezitting of 4 December 2025 before a chamber composed of mr. S. T. Kooistra (presiding), mr. H. C. L. Vreugdenhil, and mr. A. Dijkstra, with W. van Goor as griffier, are taken as the doctrinal occasion. The disciplinary complaint against Mw. V. Rama before the Regionaal Tuchtcollege voor de Gezondheidszorg te Zwolle and the international submissions to United Nations Special Procedures, the European Court of Human Rights, and the Office of the Prosecutor of the International Criminal Court remain pending; nothing in this article asserts a factual finding concerning the conduct of any individual. The defendant in the underlying proceedings is referred to throughout as “the defendant” or “the defendant/victim”; defence counsel is referred to by initials only (mr. S.N.dJ.); members of the defendant’s household are not identified.