Have you been registered with Stichting CIS and ask yourself: when is CIS registration permitted? A CIS registration can have far-reaching consequences for your financial future. It can prevent you from taking out a new insurance policy, cause your current policy to be terminated, or make it impossible to obtain a mortgage. Insurers use this database to assess risks and combat fraud. However, they are not permitted to record every event indiscriminately. There are strict statutory and contractual rules governing the inclusion of your data in the register. In this comprehensive article the specialised lawyers of Arslan & Arslan Advocaten explain in detail which conditions a registration must meet, which types of registrations exist, and what your rights are if you disagree with the entry. We discuss the main pitfalls and give you practical tips to protect your interests.
What exactly is a CIS registration and how does it work?
Before we address the question of when a registration is permitted, it is important to understand what Stichting CIS (Centraal Informatie Systeem) actually does. Stichting CIS manages a central database for insurance companies and authorised representatives in the Netherlands. The purpose of this database is twofold: to control risks and to prevent and combat insurance fraud. When you report a claim, apply for insurance or when an incident occurs, insurers can record this information in the database. Other participating financial institutions can then view these data when they need to decide whether to accept a customer or to pay a claim. It is important to emphasise that Stichting CIS itself does not make decisions about whether to accept an insurance application; it merely facilitates the exchange of information. For more information about how the foundation operates, see the website of Stichting CIS. A registration is not necessarily evidence of fraud; it is an information system that helps insurers to form a complete picture of a policyholder. Nevertheless, an entry can have a major impact on your daily life, especially when it concerns a serious registration such as an EVR entry.
Different types of CIS registrations explained
Not every CIS registration is the same. There are different categories in which your data can be recorded, and the conditions for registration differ per category. The most common types are:
1. Claim notifications (O&S register): Every time you claim a loss with your insurer, this is recorded. This is a neutral registration and does not mean that you have done anything wrong. It provides insurers with insight into your claim behaviour. A single claim almost never leads to problems, but many claims in a short period can cause an insurer to consider you an increased risk.
2. Driving disqualifications (Rijontzeggingen): If your driving licence has been confiscated, for example because of driving under the influence, speeding or other dangerous driving behaviour, this is recorded. This is crucial information for motor insurers. Often, after such a registration it is very difficult to obtain a regular car insurance policy.
3. Non-payment: If you do not pay your insurance premium and the insurer terminates the policy for that reason, this is recorded. This can affect your ability to take out new insurance, as insurers prefer to exclude late payers.
4. Warning register and Incidents register (EVR): This is the most severe form of registration. It records persons who have committed fraud, deliberately provided incorrect information or otherwise engaged in seriously improper conduct. Read more about the Incidents register and how you end up there.
When is CIS registration permitted? The general conditions
The core question is of course: when is CIS registration permitted? An insurer may only place your data in the CIS register if this is done in accordance with the Algemene Verordening Gegevensbescherming (AVG) and the Protocol Incidentenwaarschuwingssysteem Financiële Instellingen (PIFI). Note: AVG is the Dutch abbreviation for the EU General Data Protection Regulation (GDPR). The main general conditions are as follows:
Legitimate interest: The insurer must have a legitimate interest in the registration. This means that the purpose of the registration (for example, fraud prevention or risk management) must outweigh your privacy interest. Collecting data may not be done arbitrarily; there must be a clear necessity.
Proportionality: The registration must be proportionate to the seriousness of the incident. A minor violation should not lead to a severe, long-lasting entry in the Externe Verwijzingsregister (EVR). The insurer must always weigh whether a milder measure would suffice.
Subsidiarity: The purpose of the registration must not be achievable in a less intrusive manner. If an insurer can achieve its aim without placing your data in a central database, that option should be chosen.
Diligence: The insurer must carefully investigate the facts before proceeding to registration. Suspicion or rumours alone are not sufficient; there must be established facts that justify the registration.
Specific requirements for an EVR registration
An entry in the Externe Verwijzingsregister (EVR) has the most far-reaching consequences. This is often referred to as the ‘black list’. Because the impact is so great, additional strict requirements apply. An EVR registration is only permitted if the following conditions are met:
1. The conduct constitutes a more serious threat to the financial interests of the institution or sector. It must involve a serious breach of the trust that insurers must be able to place in their customers.
2. A criminal offence is involved, such as fraud, forgery or embezzlement. This does not always have to have been established by a court, but the facts must amount to a criminal offence.
3. The facts are established beyond reasonable doubt. A single suspicion is insufficient. The insurer must have carried out a thorough investigation, often by a dedicated Security Affairs department, during which evidence was collected to support the allegation.
4. You were informed in advance of the intention to register and were given the opportunity to respond (hearing both sides). You must have had the opportunity to present your side of the story and clarify any misunderstandings.
Have you been accused of fraud? Read our article about what to do if the insurer accuses you of fraud.
How long does a CIS registration remain and what is reasonable?
A CIS registration is not permanent. The retention period depends on the type of registration. Claim notifications generally remain for 4 to 5 years. A registration for non-payment typically remains visible for 3 to 5 years, depending on the arrangements with the insurer. The most severe registration, the EVR registration, may last a maximum of 8 years. However, the duration of an EVR registration must always be proportionate to the seriousness of the conduct. In many cases a judge or the Kifid (Klachteninstituut Financiële Dienstverlening) finds that a shorter period, for example 2 or 4 years, is more appropriate depending on your personal circumstances and the severity of the facts. A period of 8 years is often regarded as an ultima ratio, intended for the most serious cases of fraud. It is therefore always sensible to have the duration of a registration legally reviewed by an experienced lawyer, especially if the registration seriously hinders your life.
What to do in case of an incorrect or disproportionate registration?
If you believe that the answer to the question ‘when is CIS registration permitted’ in your case should be ‘no’, or if you think the duration of the registration is too long, you have several options to challenge the registration. The first step is always to file a formal objection with the insurer who placed the registration. You ask them to remove the registration or to shorten the retention period, supported by your arguments and evidence. Make sure you clearly explain why the registration is incorrect or why the duration is unreasonable in your particular situation. If the insurer refuses to comply with your request, you can file a complaint with the Klachteninstituut Financiële Dienstverlening (Kifid). Kifid independently assesses whether the insurer has complied with the rules and whether the registration is justified and proportionate. If Kifid also does not rule in your favour, going to court is the last option. Discover more about the options to remove a CIS registration.
The role of a specialised insurance law lawyer
Challenging a CIS registration is complex legal matter. Insurers have large legal departments and it is often an unequal battle. A specialised insurance law lawyer can be essential in supporting you. We assess whether the insurer followed the correct protocol, whether the evidence is sufficient and whether the registration is proportionate. We frequently see insurers make mistakes in the investigation, draw conclusions too quickly or fail to adequately motivate their balancing of interests. With the right legal assistance an incorrect registration can be undone or significantly shortened. We help you prepare a strong objection, guide you during any proceedings at Kifid or in court, and ensure your rights are vigorously defended so you can move on with your life and put your financial affairs in order.
Frequently asked questions
Can I see for myself whether I have a CIS registration?
Yes, you have the right to access your own data. You can submit an access request to Stichting CIS via their website. You will then receive an overview of the registrations in your name, including the reason and the insurer who placed the registration. It is advisable to check this regularly, especially if you experience problems when taking out insurance.
Can an insurer refuse me on the basis of a single claim notification in CIS?
A single claim notification is usually not a reason for refusal. However, if you have filed an unusually high number of claims in a short period, an insurer may consider you an increased risk and reject the application or impose additional conditions. This varies per insurer and their acceptance policy. Some insurers are more lenient than others.
What is the difference between a CIS registration and a BKR registration?
Stichting CIS records information relating to insurance and incidents in the financial sector, with the primary aim of combating fraud and managing risk for insurers. The BKR (Bureau Krediet Registratie) registers loans and credit to prevent over-indebtedness. They are therefore two separate systems with different purposes, although both can affect your financial options and access to financial services.
Read also
- EVR registration: difference with CIS explained
- Filing a complaint with Kifid – your rights, step-by-step plan and tips
- Insurance law lawyer: expert help in disputes
Need help?
Are you confronted with a CIS registration that is obstructing your daily life? Are you unable to obtain insurance or encountering other problems? The lawyers of Arslan & Arslan Advocaten have extensive experience in successfully challenging incorrect or disproportionate registrations. We are happy to assist you with expert advice and decisive legal support. Contact us for a free initial consultation via https://arslan.nl/contact/ and find out what we can do for you. We review your case without obligation and give you honest advice about your prospects.