Bits of Freedom

Bits of Freedom is the Netherlands' principal digital-rights organisation, an Amsterdam-based foundation working on privacy, freedom of communication, and — increasingly through the late 2010s and 2020s — on algorithmic decision-making, biometric mass surveillance, facial recognition, and the regulation of artificial intelligence in the Dutch state and across the European Union. Its self-description frames the work in terms of public power over technology: "To live together in freedom and equality, we need a strong democracy governed by the rule of law. The power of technology must be held by people striving to fulfil those conditions." The organisation is a founding member of European Digital Rights (EDRi) — its first director Maurice Wessling sat on EDRi's founding board at the 2002 Berlin launch — and remains the Dutch anchor of the EDRi-coordinated European civil-society work on biometric surveillance, the EU AI Act, and platform regulation under the Digital Services and Digital Markets Acts.

Founding and structure

Bits of Freedom traces its origins to 1999, out of the Dutch activist internet service provider XS4ALL, and was formally established as a foundation (stichting) in early 2000 by Maurice Wessling — at that time the spokesperson for XS4ALL — together with Felipe Rodriguez and Karin Spaink, the latter serving as chairperson from 1999 to 2006. The foundation's earliest agenda was set by the European crypto-wars, by emerging Dutch data-retention legislation, and by the freedom-of-expression and intermediary-liability casework that XS4ALL had been carrying as an activist ISP through the late 1990s; the 2004 Multatuli Project — in which the foundation uploaded public-domain content to ten Dutch internet providers and submitted fake takedown complaints, seven of which were complied with — became the organisation's signature early piece of public-interest evidence on the architecture of online censorship.

The organisation went through a funding-driven hiatus between 2006 and August 2009 and was restarted with structural support from the Internet4All Foundation — itself a vehicle created as a condition of the sale of XS4ALL to KPN — under which the organisation has run continuously since. Since 2009 Bits of Freedom has been led from Amsterdam by a succession of executive directors, with Evelyn Austin — a Hmm internet-culture platform co-founder and Mediamatic alumna who joined as Director in 2019 — currently serving as Algemeen Directeur in a 2025 co-director model alongside Business Director Nico Voskamp, with Austin carrying the external vision, strategy, communications, and public-affairs portfolio and Voskamp the operational, financial, and personnel portfolio. The organisation is a non-charitable foundation in Dutch law and refuses Dutch and EU government funding as a matter of standing independence policy.

Programme areas

The organisation's 2025–2027 programme structure is built around four interlocking lines of work. The first is Young people and technology — protecting young people from surveillance, manipulation, exploitation, and discrimination by online services and by Dutch state programmes targeting them. The second is Security — opposing discriminatory government data processing and state-surveillance practices, including police, intelligence-service, and welfare-state algorithmic decision-making. The third is Civic space — resisting Big Tech dominance in the Dutch and European information ecosystem and protecting the conditions for democratic participation online, including under the EU Digital Services Act and Digital Markets Act. The fourth is Bodily integrity — opposing the indiscriminate capture and processing of bodily data and biometric systems including facial recognition and emotion recognition in public space. Across these four areas the organisation works through five mechanisms: research and Freedom of Information work; movement building and coalition convening; public communication and campaigning; lobbying in The Hague and Brussels; and legal action including strategic complaints and litigation. The programme structure carries ten thematic files the organisation publishes against — biometric surveillance, data justice, freedom of communication, artificial intelligence, government surveillance, encryption, police, security services, platforms and big tech, and "your data".

Big Brother Awards and the SyRI case

Bits of Freedom administers the Dutch edition of the Big Brother Awards, the annual privacy-violator prize originally established by Privacy International and now run nationally by the principal digital-rights organisation in each participating country. The Dutch awards consist of an Expert Award decided by a jury, a Public Award decided by audience vote, and the positive Felipe Rodríguez Award (named for the XS4ALL co-founder who was central to Bits of Freedom's own founding). The awards have grown over twenty years into one of the country's most visible recurring civil-society ceremonies on technology and the state.

The Dutch government's SyRI (Systeem Risico Indicatie) welfare-fraud risk-scoring algorithm — a Ministry of Social Affairs system that combined data from tax, social security, housing, and education records to flag individuals in named low-income and minority-population neighbourhoods as fraud risks — was awarded the 2019 Dutch Big Brother Award by Bits of Freedom on 29 November 2019, three months before the District Court of The Hague found on 5 February 2020 that the SyRI legislation violated Article 8 of the European Convention on Human Rights for processing too much data with insufficiently specific purposes and for opaque algorithmic targeting of poor neighbourhoods. The underlying coalition litigation was led on the public-interest side by Platform Bescherming Burgerrechten and the Public Interest Litigation Project (PILP-NJCM) with the trade union FNV, Stichting Privacy First, Stichting KDVP, and the Landelijke Cliëntenraad as co-claimants and the authors Tommy Wieringa and Maxim Februari joining in individual capacity; Bits of Freedom's role on the SyRI public-record campaign was as the Big Brother Awards convener that crystallised the Dutch civil-society public-facing argument against the system in the months running up to the ruling.

Reclaim Your Face and biometric mass surveillance

Bits of Freedom is one of the twelve founding civil-society organisations of the EDRi-coordinated Reclaim Your Face movement against biometric mass surveillance in European public space, launched in October 2020 alongside EDRi as coordinator, AlgorithmWatch, Access Now, ARTICLE 19, Privacy International, Homo Digitalis, the Hermes Center, the Panoptykon Foundation, IT-Pol Denmark, Liberties, and La Quadrature du Net, and one of the named EDRi-member national-coalition partners that opened the European Citizens' Initiative signature drive into its own member-state context on 17 February 2021 under the campaign tagline "Reclaim our public space. Ban biometric mass surveillance!" The organisation has run the campaign's Dutch leg through Bits of Freedom-branded mobilisation, named submissions to the Dutch Data Protection Authority on private and police biometric deployments, and parallel domestic-press communications on the Dutch facial-recognition surveillance estate; the December 2021 organisation post "A limited ban on biometric surveillance undermines its own potential" is the standing Bits of Freedom position on the AI Act's law-enforcement and migration-context carve-outs.

In April 2023 Bits of Freedom policy advisor Lotte Houwing submitted a subject-access request to Clearview AI — the US-based facial-recognition company whose database is scraped from publicly accessible internet sources — confirmed that her own face was in the database, and lodged a formal tip with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) noting the scraping practice and the 51–100 searches that Dutch police had conducted against the database per Buzzfeed reporting. The DPA's 4 September 2024 enforcement decision fined Clearview AI 30.5 million euros plus penalties of up to a further 5 million euros for processing biometric data without legal basis, scraping faces without informing data subjects, and failing to respond properly to subject-access requests under the GDPR. Houwing's framing — "Through scraping, this company collects huge amounts of faces that are on the internet" — became the public summary of the case in Dutch press coverage. The Clearview enforcement action is one of the largest GDPR fines on a facial-recognition-database operator on the European public record to date and is treated by the organisation as a template for the corresponding Dutch police-deployment cases — including the CATCH face-recognition database, which by December 2021 held facial images of more than 1.5 million people — that the organisation continues to press through complaint and litigation.

EU AI Act and algorithmic accountability

Bits of Freedom is one of the stable nucleus of European digital-rights co-drafters of the EDRi-coordinated EU AI Act civil-society coalition that worked the Commission's April 2021 proposal, the European Parliament's 14 June 2023 negotiating mandate, and the December 2023 trilogue endgame, named on the public record alongside EDRi, Access Now, the Panoptykon Foundation, epicenter.works, AlgorithmWatch, the European Disability Forum, Fair Trials, PICUM, and ANEC as a co-drafter of the 30 November 2021 statement "An EU Artificial Intelligence Act for Fundamental Rights" signed by 115 organisations and the 12 July 2023 trilogue-stage statement signed by 150 organisations. The organisation's domestic Dutch work on the AI Act has run in parallel to the Brussels coalition track and has been the principal vehicle through which the seven-prohibition civil-society demand list (social scoring; remote biometric identification in publicly accessible spaces; emotion recognition; discriminatory biometric categorisation; AI physiognomy; predictive-policing systems; profiling and risk-assessment in migration contexts) has been carried into the Dutch parliamentary debate on AI Act implementation under the 2 August 2026 full-application milestone.

Adjacent to the European track, the organisation has run a sustained line of Dutch-state algorithmic-accountability work. Its 2024 work on the Amsterdam Top400 programme — a municipal predictive-policing-adjacent risk-scoring scheme that profiled children at elevated risk of involvement in serious crime — was central to the municipality's decision to discontinue the use of the algorithm, with ongoing dialogue between the organisation and city authorities on compensation for affected young people. The organisation has also published continuous criticism of the Dutch tax authority's algorithmic discrimination in the toeslagenaffaire childcare-benefits scandal, of police use of automated number-plate recognition and facial-recognition tooling, of the Wet gegevensverwerking door samenwerkingsverbanden (data-processing-in-partnership) framework that succeeded SyRI, and of the increasing reliance of Dutch ministries on US-provided cloud and AI infrastructure for sensitive public-sector workloads.

Funding and independence

Bits of Freedom's public funding policy sets a target funding mix of most revenue from individual donors with at least one-third from foundations and at most one-third from corporate contributors, with corporate contributions capped at 2.5 percent of annual budget per donor and a minimum corporate contribution of 500 euros, and refuses Dutch and EU government money as a standing matter of independence. Structural foundation support comes from Adessium Foundation, the Limelight Foundation, SIDN Fonds, and Stichting Democratie & Media; project funding has come from the Gieskes-Strijbis Fonds, Stichting Goeie Grutten, and Civitates (the Brussels-based pooled European-democracy fund administered by the Network of European Foundations and itself sub-funded by Adessium). Open Society Foundations is on the public record as a project funder of the organisation's EDRi and EU AI Act work, with a named 231,000-euro grant covering 2022 through 2024.

Posture in the movement

Bits of Freedom's place in the make-AI-good corpus is as the Netherlands' clearest grassroots-style anchor for civil-liberties campaigning against biometric and AI-driven surveillance, and as one of EDRi's load-bearing national-coalition members on the AI Act file. Its working theory of change — that public power over technology requires sustained domestic research, coalition work with Platform Bescherming Burgerrechten and PILP-NJCM on Dutch state-side cases, AI-and-biometric-surveillance complaints to the Dutch Data Protection Authority, and parallel Brussels-track participation in EDRi-coordinated joint statements and the Reclaim Your Face vehicle — is the Dutch template for engaging non-specialist publics in shaping how facial-recognition, predictive-policing, and welfare-state algorithmic decision-making systems are deployed in the Netherlands and the EU. The Big Brother Awards remain the organisation's most visible public-facing artefact in the Dutch press cycle; the Clearview AI enforcement action and the Amsterdam Top400 discontinuation are the two single concrete wins the organisation cites most often as evidence that civil-society pressure can move Dutch and European biometric and algorithmic deployments. The organisation's continued refusal of government money is itself part of its public posture, and the funding-mix targets it sets on individual-donor revenue make Bits of Freedom one of the European digital-rights field's clearest demonstrations of supporter-base-led independence.