Various developments aim to enable citizens to share their own data (income, driving licences or diplomas) from government sources with service providers. These include the EUDI wallet, SDG-OOTS, and sharing data with private service providers via consent (DvTP).
For these 3 solutions, the Common Source Disclosure programme, known as Gemeenschappelijke Bronontsluiting (GBO) in Dutch, is developing a standardised method for government organisations to provide interoperable and reusable data.
Joint challenge
Government organisations (data owners) face the challenge of making data securely and simply available for various national and European developments. This is complicated by the fact that data sharing currently occurs through different methods. Therefore, efforts are underway to develop a uniform approach that simplifies collaboration and reduces implementation and operational burdens. The EUDI-wallet, SDG-OOTS and DvTP developments all share the common feature that citizens initiate the sharing of personal data. What do these solutions entail?
- EUDI-wallet: Under the eIDAS2 regulation, work is underway on the European Digital Identity (EUDI-wallet). With this digital wallet, citizens can identify themselves digitally, securely share personal data, and sign documents digitally with both public and private service providers in the Netherlands and across the rest of the EU.
- SDG-OOTS: Based on the Single Digital Gateway regulation (SDG), work is underway on the Once Only Technical System (OOTS). OOTS enables citizens (and businesses) to give consent to European public service providers. After that, government organisations can exchange required proof documents once, automatically and securely.
- DvTP: The Data Governance policy, or Regie op gegevens (Dutch), is developing a solution to share data with private service providers (DvTP) via consent. This addresses the undesirable practice of ‘screen scraping’ from citizens’ personal environments on government websites (and thus from government sources).
Benefits of GBO
GBO focuses on the common aspects of source access. This means: generic agreements, standards and facilities that make data from government sources securely and reusably available. EUDI-wallet, SDG-OOTS, and DvTP can use GBO components and focus on their specific applications, avoiding duplicated work. Other benefits of this joint approach include:
- Alignment with European and international agreements and standards.
- Reduced implementation burden for data owners.
- Reduced customisation and ad hoc implementations.
- Improved reuse of generic facilities.
- Greater uniformity and interoperability across governments and between government and private parties.
- Reusable source access for new developments.
Embedding in existing frameworks
GBO will not become a new, standalone system. The implemented functions will be embedded wherever possible within existing frameworks, including the Federated Data System (FDS) and the Generic Digital Infrastructure (GDI) for government, and within public-private frameworks such as Trusted Information Partners (TIP) for exchange with private service providers. This approach improves interoperability both nationally and across Europe. Over time, it will become clear which components do not fit within existing frameworks and where additional development is required.
Relationship between GBO and Uniform Source Access
Uniform Source Access (Dutch) (BronConnect), a project by the Association of Netherlands Municipalities (VNG), conducted a pilot in spring 2026. The pilot examined which uniform working methods and agreements are suitable for the easy and secure exchange of data within the EU. VNG carried out this pilot together with the municipalities of Rijswijk and Rotterdam, the RINIS foundation, suppliers EnableU and Cleverbase, the national SDG coordinator, and Digilab. This project will be completed before summer 2026, and GBO will incorporate the knowledge and experience gained.
Timeline
The GBO programme timeline is as follows:
- Start-up phase: January to June 2026
- Development phase: July to December 2026
- Implementation phase: January to December 2027
During the start-up phase, the team will work on the Global Design (Dutch) in the GitHub environment. Based on the Global Design, the team will develop a Project Start Architecture (PSA), a technical design, and an information model and requirements to prepare for the development phase.
Collaboration
The programme involves collaboration with the FDS, TIP, GDI, EDI, SDG, and DvTP. It also includes data owners such as the Dutch Data Protection Authority (RvIG), the VNG, the Employee Insurance Agency (UWV), the Education Executive Agency (DUO), the Dutch Tax and Customs Administration (Belastingdienst), and the Chamber of Commerce (KVK). Additional data owners are welcome to participate. For more information, please contact gbo@ictu.nl.
