Various developments aim to enable citizens to share their own data (income, driving licences or diplomas) from government sources with service providers. These include EUDI-wallet, SDG-OOTS, and sharing data with private service providers via consent (DvTP).
For these 3 solutions, the Common Source Access programme, known as Gemeenschappelijke Bronontsluiting (GBO) in Dutch, is developing a standardised method for government organisations to provide interoperable and reusable data.
Joint challenge
Government organisations (data owners) face the challenge of making data securely and simply available for various national and European developments. This is complicated by the fact that data sharing currently occurs through different methods. Therefore, efforts are underway to develop a uniform approach that simplifies collaboration and reduces implementation and operational burdens. The EUDI-wallet, SDG-OOTS and DvTP developments all share the common feature that citizens initiate the sharing of personal data. What do these solutions entail?
- EUDI-wallet: Under the eIDAS2 regulation, work is underway on the European Digital Identity (EUDI-wallet). With this digital wallet, citizens can identify themselves digitally, securely share personal data, and sign documents digitally with both public and private service providers in the Netherlands and across the rest of the EU.
- SDG-OOTS: Based on the Single Digital Gateway regulation (SDG), work is underway on the Once Only Technical System (OOTS). OOTS enables citizens (and businesses) to give consent to European public service providers. After this, required proof documents can be exchanged once, automatically and securely, between government organisations.
- DvTP: Based on the Regie op gegevens (in English, Data Governance) policy file (Dutch), a solution is being developed to share data with private service providers (DvTP) via consent. This addresses the undesirable practice of ‘screen scraping’ from citizens’ personal environments on government websites (and thus from government sources).
Benefits of GBO
GBO focuses on the common aspects of source access. This means: generic agreements, standards and facilities that make data from government sources securely and reusably available. EUDI-wallet, SDG-OOTS and DvTP can use GBO components and focus on their specific applications, thereby preventing duplication of work. Other benefits of this joint approach include:
- Alignment with European and international agreements and standards.
- Reduced implementation burden for data owners.
- Reduced customisation and ad hoc implementations.
- Improved reuse of generic facilities.
- Greater uniformity and interoperability across governments and between government and private parties.
- Reusable source access for new developments.
Embedding in existing frameworks
GBO will not become a new, standalone system. The implemented functions will be embedded wherever possible within existing frameworks, including the Federated Data System (FDS) and the Generic Digital Infrastructure (GDI) for government, and within public-private frameworks such as Trusted Information Partners (TIP) for exchange with private service providers. This approach improves interoperability both nationally and across Europe. Over time, it will become clear which components do not fit within existing frameworks and where additional development is required.
Relationship between GBO and Uniform Source Access
The VNG project Uniform Source Access (Dutch) (BronConnect) conducted a pilot in spring 2026. The pilot examined which uniform working methods and agreements are suitable for the easy and secure exchange of data within the EU. VNG carried out this pilot together with the municipalities of Rijswijk and Rotterdam, the RINIS foundation, suppliers EnableU and Cleverbase, the national SDG coordinator, and Digilab. This project will be completed before summer 2026, and the knowledge and experience gained will be incorporated into GBO.
Timeline
The GBO programme timeline is as follows:
- Start-up phase: January to June 2026
- Development phase: July to December 2026
- Implementation phase: January to December 2027
During the start-up phase, work will be carried out on the Global Design (Dutch) in the GitHub environment. Based on the Global Design, a Project Start Architecture (PSA), a technical design, and an information model and requirements will be developed to prepare for the development phase.
Collaboration
The programme involves collaboration with the Federated Data System (FDS), Trusted Information Partners (TIP), Generic Digital Infrastructure (GDI), EDI, SDG, and DvTP. It also includes data owners such as the Dutch Data Protection Authority (RvIG), the Association of Netherlands Municipalities (VNG), the Employee Insurance Agency (UWV), the Education Executive Agency (DUO), the Dutch Tax and Customs Administration (Belastingdienst), and the Chamber of Commerce (KVK). Additional data owners are welcome to participate. For more information, please contact gbo@ictu.nl.
