Network

This page explains what professionals in this field can do, and what powers municipalities have when it comes to conducting online investigations.

The local network can pick up on and interpret signs of online radicalisation. Preventive interventions are also conducted, to help build cyber resilience. Examples:

Organisations are already highlighting the cyber domain, for example by providing online youth services and appointing digital community police officers.
Various parties contribute to interventions centred on cyber resilience, for example through partnerships among municipalities, educational institutions, libraries and media teams.
Expertise from the national network can be used to analyse trends and developments in the cyber domain or to interpret signs of possible online radicalisation.
By maintaining a presence in online groups, civil society can play a role in identifying worrying signs or initiating a dialogue about online behaviour.

Parents also have a key role to play in this. Parents and other caregivers are closely involved in the lives of young people, and they can make online behaviour a topic of conversation. Finally, platforms have a responsibility to protect their users from online extremism and terrorism. The NCTV is in discussions about this with the internet sector, which is required to comply with EU legislation in this area.

Embedding the cyber dimension in existing structures

The local approach should enhance the link between the online and offline dimensions. These cannot be considered separate worlds – young people certainly don’t see them that way. The first step is to embed the cyber dimension in existing structures. In this way knowledge can be shared within the local network, and the parties involved can work together to examine new developments and identify opportunities for action.

Networking sessions, webinars or other types of meetings can serve as a platform for this. Prior to or during case conferences, behaviour linked to the cyber domain is also a significant factor. Such behaviour may include isolation from family and friends, an excessive amount of screen time or an active online presence.

Municipalities and online investigation

Municipalities have limited powers when it comes to conducting investigations using publicly available online sources. To some extent, a number of provisions of the Municipalities Act (sections 151, 172, 175 and 176) provide a legal basis for processing personal data by means of online investigation using publicly available sources. Within the local approach to radicalisation, extremism and terrorism, this is the case when it can be established that there is a public order aspect (section 172).

The guide ‘Online investigations by municipalities’ (in Dutch) makes clear what is and is not legally possible when it comes to conducting online investigations, and how municipalities can implement and document their working methods.

The main conditions cited in the guide are as follows:

The investigation is motivated by a breach of public order or the threat of one.
It is necessary to process personal data (proportionality and subsidiarity).
The legal basis applied justifies the infringement of the individual’s privacy.
The principles of the General Data Protection Regulation (GDPR) are observed (lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality).

Protocol

Before conducting an investigation using publicly available sources, it is important to establish a protocol that can be used to assess whether the online investigation is lawful. The protocol should be drawn up in consultation with the local privacy officer (PO) and the data protection officer (DPO). They can advise on the requirements governing online investigations.

Working alongside regional partnership Noord Holland Samen Veilig (Making North Holland Safe Together), the Association of Netherlands Municipalities published a protocol in May 2024, which can serve as a guide.

Before processing personal data that likely entails a high risk to privacy, a public authority must also conduct a data protection impact assessment (DPIA). A DPIA offers insight into the relevant risks and how to mitigate them. To this end, it is useful to consult the local PO and follow the guidelines provided by the Dutch Data Protection Authority (DPA).

Finally, it is important to reflect on who should be designated the data controller, with the duty of accountability that this entails. The GDPR lays down various requirements for data controllers and processors.

Inspiration: the Utrecht Online Coalition

In 2024 the municipality of Utrecht launched the Utrecht Online Coalition (UOC). This body brings together various parties within the city (including youth services, health and welfare services, the library, the police, the municipality, education, Stichting Vreedzaam (an organisation that aims to promote community harmony) and Mediateam) to develop an approach to online polarisation, radicalisation and extremism. This is being done by means of a shared vision, concrete projects and the regular exchange of knowledge and products.

What can we learn from the Utrecht model?

Make a pragmatic start and tailor your approach to the local context. Start by gathering together local parties that are already active in the area of online polarisation and radicalisation. Pool their efforts to develop a joint coordinated approach.
Importance of involving parents and schools. Parents and guardians play a crucial role in supervising young people’s activities online and spotting problematic behaviour. For that reason you should invest in tools and partnerships with parental organisations in order to make parents aware of this role. It is also important to get schools involved; media and news literacy plays a key role in this connection.
Integrate the social, education, healthcare and security domains. Integrating the social, education, care and security domains gives rise to a holistic approach to online polarisation and radicalisation. Connecting with your fellow municipal officials in domains other than your own is a good first step.
Administrative support. It is important for administrators to understand and embrace this approach. Help them understand the urgency of the approach, and wherever possible, get young people involved in dialogue.
Make use of existing networks and initiatives. Municipalities don’t have to re-invent the wheel: they can use existing national knowledge, interventions and tools.
Being aware of what is happening online. Municipalities have a unique position and network. Maintain contact with local residents about the online world and get to know their thoughts about it. The legal frameworks of the GDPR apply in this connection, but by consulting experts and raising awareness about what is permissible, municipalities can tackle this issue appropriately.
Knowledge exchange. Regular meetings between the parties concerned offer scope for sharing knowledge and testing new approaches. This promotes the development of effective and innovative solutions.

Knowledge and skills
Interventions

Questions

If you have any questions or would like more information, please email pls@minjenv.nl.