Have you been registered with Stichting CIS and ask yourself: when is CIS registration permitted? A CIS registration can have far-reaching consequences for your financial future. It can prevent you from taking out a new insurance policy, cause your current policy to be terminated, or make it impossible to obtain a mortgage. Insurers use this database to assess risks and combat fraud. However, they are not permitted to record every event indiscriminately. There are strict statutory and contractual rules governing the inclusion of your data in the register. In this comprehensive article the specialised lawyers of Arslan Advocaten explain in detail which conditions a registration must meet, which types of registrations exist, and what your rights are if you disagree with the entry. We discuss the main pitfalls and give you practical tips to protect your interests.
What exactly is a CIS registration and how does it work?
Before we address the question of when a registration is permitted, it is important to understand what Stichting CIS (Centraal Informatie Systeem) actually does. Stichting CIS manages a central database for insurance companies and authorised representatives in the Netherlands. The purpose of this database is twofold: to control risks and to prevent and combat insurance fraud. When you report a claim, apply for insurance or when an incident occurs, insurers can record this information in the database. Other participating financial institutions can then view these data when they need to decide whether to accept a customer or to pay a claim. It is important to emphasise that Stichting CIS itself does not make decisions about whether to accept an insurance application; it merely facilitates the exchange of information. For more information about how the foundation operates, see the website of Stichting CIS. A registration is not necessarily evidence of fraud; it is an information system that helps insurers to form a complete picture of a policyholder. Nevertheless, an entry can have a major impact on your daily life, especially when it concerns a serious registration such as an EVR entry.
Different types of CIS registrations explained
Not every CIS registration is the same. There are different categories in which your data can be recorded, and the conditions for registration differ per category. The most common types are:
1. Claim notifications : Every time you claim a loss with your insurer, this is recorded. This is a neutral registration and does not mean that you have done anything wrong. It provides insurers with insight into your claim behaviour. A single claim almost never leads to problems, but many claims in a short period can cause an insurer to consider you an increased risk.
2. Driving disqualification: this concerns an imposed driving disqualification, not the temporary confiscation of a driving licence on its own. It can affect a motor insurer’s risk assessment.
3. Non-payment: If you do not pay your insurance premium and the insurer terminates the policy for that reason, this is recorded. This can affect your ability to take out new insurance, as insurers prefer to exclude late payers.
4. External Referral Register (EVR): This is the most severe form of registration. It records persons who have committed fraud, deliberately provided incorrect information or otherwise engaged in seriously improper conduct. Read more about the Incidents register and how you end up there.
When is CIS registration permitted? The general conditions
Personal data processing must comply with the GDPR and the rules for the particular registration. PIFI governs incident warning records and EVR; an ordinary insurance claim is not assessed as if it were a fraud warning. PIFI 2026 took effect on 1 April 2026. For an older entry, also check the rules applicable when it was made.
Legitimate interest: The insurer must have a legitimate interest in the registration. This means that the purpose of the registration (for example, fraud prevention or risk management) must outweigh your privacy interest. Collecting data may not be done arbitrarily; there must be a clear necessity.
Proportionality: The registration must be proportionate to the seriousness of the incident. A minor violation should not lead to a severe, long-lasting entry in the Externe Verwijzingsregister (EVR). The insurer must always weigh whether a milder measure would suffice.
Subsidiarity: The purpose of the registration must not be achievable in a less intrusive manner. If an insurer can achieve its aim without placing your data in a central database, that option should be chosen.
Diligence: The insurer must carefully investigate the facts before proceeding to registration. Suspicion or rumours alone are not sufficient; there must be established facts that justify the registration.
Specific requirements for an EVR registration
An entry in the Externe Verwijzingsregister (EVR) has the most far-reaching consequences. This is often referred to as the ‘black list’. Because the impact is so great, additional strict requirements apply. An EVR registration is only permitted if the following conditions are met:
1. The conduct constitutes a more serious threat to the financial interests of the institution or sector. It must involve a serious breach of the trust that insurers must be able to place in their customers.
2. Your involvement in the relevant threatening conduct must be sufficiently established. A criminal conviction is not a general prerequisite. Where criminal personal data are processed, the evidence must support more than a reasonable suspicion.
3. The insurer must support its conclusion about your involvement with concrete facts. A single suspicion is insufficient. The insurer must have carried out a thorough investigation, often by a dedicated Security Affairs department, during which evidence was collected to support the allegation.
4. Both registration and its duration must be proportionate. The institution also has a duty to inform you about registration, subject to legally permitted exceptions. Absence of advance notice does not automatically invalidate every EVR entry.
Have you been accused of fraud? Read our article about what to do if the insurer accuses you of fraud.
How long does a CIS registration remain and what is reasonable?
The period depends on the type: claim and Guarantee Fund notifications generally remain for five years from the reference date; driving disqualifications for five years from their end date. A confidential notification about contractual non-compliance lasts five years, or three years for non-payment. EVR has a maximum of eight years and requires an individual assessment of duration. See CIS’s explanation of registration periods.
What to do in case of an incorrect or disproportionate registration?
If you believe that the answer to the question ‘when is CIS registration permitted’ in your case should be ‘no’, or if you think the duration of the registration is too long, you have several options to challenge the registration. The first step is always to file a formal objection with the insurer who placed the registration. You ask them to remove the registration or to shorten the retention period, supported by your arguments and evidence. Make sure you clearly explain why the registration is incorrect or why the duration is unreasonable in your particular situation. If the insurer refuses to comply with your request, you can file a complaint with the Klachteninstituut Financiële Dienstverlening (Kifid). Kifid independently assesses whether the insurer has complied with the rules and whether the registration is justified and proportionate. Kifid and court proceedings are different routes. After binding advice, a court will not normally reconsider the entire case. Check the appropriate route and any separate data-protection deadline before choosing. Discover more about the options to remove a CIS registration.
The role of a specialised insurance law lawyer
Challenging a CIS registration is complex legal matter. Insurers have large legal departments and it is often an unequal battle. A specialised insurance law lawyer can be essential in supporting you. We assess whether the insurer followed the correct protocol, whether the evidence is sufficient and whether the registration is proportionate. We frequently see insurers make mistakes in the investigation, draw conclusions too quickly or fail to adequately motivate their balancing of interests. With the right legal assistance an incorrect registration can be undone or significantly shortened. We help you prepare a strong objection, guide you during any proceedings at Kifid or in court, and ensure your rights are vigorously defended so you can move on with your life and put your financial affairs in order.
Frequently asked questions
Can I see for myself whether I have a CIS registration?
Yes, you have the right to access your own data. You can submit an access request to Stichting CIS via their website. You will then receive an overview of the registrations in your name, including the reason and the insurer who placed the registration. It is advisable to check this regularly, especially if you experience problems when taking out insurance.
Can an insurer refuse me on the basis of a single claim notification in CIS?
A single claim notification is usually not a reason for refusal. However, if you have filed an unusually high number of claims in a short period, an insurer may consider you an increased risk and reject the application or impose additional conditions. This varies per insurer and their acceptance policy. Some insurers are more lenient than others.
What is the difference between a CIS registration and a BKR registration?
Stichting CIS records information relating to insurance and incidents in the financial sector, with the primary aim of combating fraud and managing risk for insurers. The BKR (Bureau Krediet Registratie) registers loans and credit to prevent over-indebtedness. They are therefore two separate systems with different purposes, although both can affect your financial options and access to financial services.
Read also
- EVR registration: difference with CIS explained
- Filing a complaint with Kifid – your rights, step-by-step plan and tips
- Insurance law lawyer: expert help in disputes
Need help?
Are you confronted with a CIS registration that is obstructing your daily life? Are you unable to obtain insurance or encountering other problems? The lawyers of Arslan Advocaten have extensive experience in successfully challenging incorrect or disproportionate registrations. We are happy to assist you with expert advice and decisive legal support. Contact us for a free initial consultation via https://arslan.nl/contact/ and find out what we can do for you. We review your case without obligation and give you honest advice about your prospects.
