Denmark's population register leaked the data of about 8.8 million people. Denmark has a little over six million inhabitants.

The register also holds the dead and the people who moved abroad, which is how the figure overshoots the population.

What leaked: names, addresses and CPR numbers. Access ran through a third-party company, whose access to the register has since been blocked, and the incident was reported to the Danish privacy regulator. The Danish ministry of Digital Affairs disclosed the breach.

Then comes the question with the unsatisfying answer: what is a citizen supposed to do about it. Close to nothing. What is left to decide is what to believe about the risk that stays behind.

No account to close

With a loyalty card there is an exit. Delete the account and buy groceries somewhere else. A population register has no account to close, no password to rotate and no competitor to switch to. Registration happens at birth, administered by people nobody voted for in that capacity.

The trust is never granted. It arrives with the birth certificate and stays.

Trusting the state with this data is the only available position, so calling it naive misses the target. Complaining about it works about as well as complaining about gravity, and gravity has the better operational record.

The second layer is where the trouble starts. Forced trust quietly gets reinterpreted as safety. No choice becomes no risk, and no risk becomes a vague confidence that serious countries do not lose their population registers. Denmark is a serious country. It lost its register anyway, through a supplier.

Isn't the state better at this than a webshop?

That is the strongest objection. Governments are better resourced and more heavily regulated on security than most private companies. A ministry has budget, oversight, audits and a regulator that can make its life unpleasant. The average webshop has a developer who left in 2021. On that comparison, default trust in the state looks like a sensible allocation of worry.

There is something to it. The Danish breach arrived through a supplier, which reads as much as a supply chain failure as a failure of the state's own walls.

The comparison still answers the wrong question. The webshop and the ministry are not competing for the same trust. One can be abandoned. The other holds a file nobody consented to and nobody can leave. Being resourced and regulated lowers the chance of a bad day. It does nothing for the exposure, and the exposure is the entire administrative identity of a country, dead residents included. Strong security with no exit is a bet with decent odds and no way to cash out.

The Dutch version of the same bet

AD, the Dutch daily, called the Danish hack a wake-up call for the Netherlands: this can happen here too. Headlines like that produce a week of commentary and then nothing, because there is no consumer action at the end of the story. Nobody can change their BSN, the Dutch citizen service number, over breakfast.

The comfortable conclusion is the one to resist. The Dutch registers are run by competent people under real supervision, and that is the strongest thing anyone can honestly say about them. It describes a probability, and it comes with the same missing exit.

Treating that probability as a guarantee is the part that is freely chosen. A citizen cannot improve the security of the BRP, the Dutch population register. A citizen can decline to feel safe about it, which costs nothing and keeps the question alive the next time a procurement decision is made on price.

The pattern is general. A register has to be complete to be worth running, and complete is what makes it worth taking. Nobody on the list applied for membership and nobody can cancel it, while the management rotates every few years without consulting the guests. The one Hotel California with a statutory basis.

A loyalty programme eventually forgets a customer who stops showing up. A register has no such manners. The entry outlives the person, so the dead go on being leaked on everybody else's schedule. They are the only names in the file who have stopped worrying about it, and nobody gets there by choosing a stronger password.