RIVM organises the National Immunisation Programme. The vaccinations are given by Youth Healthcare Services (JGZ), for example at the well-baby clinic or in a sports hall near you. By law, we must ask you for consent if you would like to have vaccinations for yourself or your child. This page explains how this works.

According to Dutch law, consent is required for:

It is important for you to understand what you are consenting to. That is why RIVM sends an informative brochure along with the vaccination invitations. You can use that information to decide whether or not to give consent.

If you have given consent for a vaccination and received the vaccination, the Youth Healthcare Services (JGZ) keeps detailed records on the vaccination data. That includes data about which vaccine was given, and where and when it was given. JGZ passes the vaccination data on to the National Institute for Public Health and the Environment (RIVM). RIVM uses the data to coordinate the National Immunisation Programme and to monitor whether the programme is working effectively.

Personal data 

JGZ always passes vaccination data on to RIVM. If you agree, JGZ will also share your personal data with RIVM. JGZ is not allowed to share personal details (name, address, city, citizen service number, birthplace, gender) unless you agree. Therefore, JGZ asks for your permission first. This is required by law (Article 7:457 of the Dutch Civil Code)

By sharing data, RIVM knows which vaccinations you have had. There are several reasons why this is useful:

  • You will only receive reminders if you actually missed a vaccination.
    If you have been vaccinated, but opted not to share personal data with RIVM, the records in our system will not show that you have had the vaccination. That means that you will receive a reminder. In that case, you will have to keep careful track of which vaccinations you have or have not had already. Otherwise you might miss a vaccination because you mistakenly thought you had already had it, or show up a second time for a vaccination that you have actually already had.
  • It is easy to ask RIVM for an overview of all the vaccinations you received.
    That can be convenient if you lost your vaccination certificate, for example. A vaccination overview is sometimes necessary if you want to travel abroad. It can also be useful when visiting a GP, other doctor, or hospital.
  • RIVM can check to make sure that you received the right vaccine at the right time.
    RIVM always checks that. Fortunately, mistakes are very rare. But if RIVM does not receive your personal data, it is not possible to check if any mistakes were made in your individual case. That means you cannot be notified if something does go wrong – and RIVM cannot offer you a solution.  
  • RIVM can protect public health more effectively.
    If there is an outbreak of infectious disease in the Netherlands, RIVM knows exactly how many people are already protected by vaccination, and who they are. This information helps RIVM assess whether the disease can spread. That helps RIVM decide if action needs to be taken, for example by inviting people to get vaccinated, or have an extra vaccination.
  • RIVM can monitor the quality of the National Immunisation Programme.
    RIVM checks whether the vaccinations ensure effective protection for the Dutch population, and how long that protection lasts.

More information about the exchange of information between JGZ and RIVM

Have you received a vaccination? Then the Youth Healthcare Services (JGZ) always pass vaccination data on to the National Institute for Public Health and the Environment (RIVM):

  • what type of vaccine JGZ gave and what disease(s) that vaccine protects against,
  • the batch number of the vaccine,
  • the date on which JGZ gave the vaccination,
  • the JGZ organisation that gave the vaccination and the location at which the vaccination was given, for example at a well-baby clinic.

Did you give permission to share vaccination data accompanied by personal details? Then JGZ will pass the vaccination data on to RIVM accompanied by personal details (name, address, city, citizen service number, birthplace, gender). Read about how RIVM handles personal data in the RIVM privacy statement.

It is possible to consent to receiving the vaccinations in the context of the National Immunisation Programme, but to deny permission for sharing vaccination data accompanied by personal details. In that case, RIVM does not know which vaccination you received. This means you will have more responsibility to keep careful track of which vaccinations you have received. You can do this by keeping accurate records on the vaccination certificate. You will need to make sure that the Youth Healthcare Services (JGZ) updates the vaccination certificate fully after each and every vaccination.

The infographic shows more information about the consequences of giving or denying permission for sharing data in the context of the National Immunisation Programme.

Only a few RIVM employees can access the data. This includes staff members working on the National Immunisation Programme who process the data administratively in the records.
Would you like to receive a summary of your vaccination data? You can request it through the form to Request a Vaccination Certificate.  Allow about 2–3 weeks between submitting your request and receiving the vaccination certificate. 

RIVM only uses vaccination data accompanied by personal details for scientific research in order to fulfil its tasks as mandated by law. This includes checking to make sure that the National Immunisation Programme is working well.

For other scientific research, researchers are only permitted to use anonymous data. That means the researchers do not receive any personal data. Very occasionally, a study requires the use of personal data. If that is the case, you will always be asked specifically for permission for that purpose. You can always refuse to give permission.

In all cases, research results can never be traced back to individuals.

The Youth Healthcare Services (JGZ) retains the data for 20 years after the last contact with a patient. RIVM retains the data until the individual reaches the age of 18 years, and then for at least 15 more years after that. This is required by law.

It is not possible to request data deletion from the Youth Healthcare Services (JGZ). JGZ is required by law to retain patient data.
It is possible to ask RIVM to delete your data. To do so, contact RIVM at AVG-RVP@rivm.nl.

The website of the Dutch national government offers more information on your rights in the Dutch healthcare system.