The AIVD and MIVD do not always comply with the law when processing large databases containing sensitive personal data, the oversight body CTIVD says. More and more departments within the intelligence agencies are working with these extensive data collections, but there is no central oversight to ensure compliance. The watchdog also found that some employees were given access to sensitive data despite lacking the required authorisation.