The gist is that this was always done when people were arrested for criminal offences. They're now doing it for civil offences and, like with all the ICE stuff, it seems to be do first, ask questions later. So you can be a citizen but your data might end up in their systems anyway as it's submitted before they find out you are a citizen...
10 years ago we found out, from a budget proposal that was in dispute, that the police had sent every mental health database in the Netherlands to Palantir. Regular health databases too, but if you're Dutch, Peter Thiel knows exactly what you told the "the law guarantees you can trust me" social worker 20 years ago. Or what you told any Dutch police officer at the border, on the street, ... Everything. That's what the Dutch state used their authority for.
Also, the DNA test is not done by the IND, but by the NFI (Dutch Forensic Institute), who destroy the material after six months.
sidewndr46 had a pretty grandiose claim (I don't think there are any European countries that do a DNA test at birth and store the data) and you only come with a lot of handwaving that is not even about DNA.
The Dutch government must have done that because it comes with a really cool badge ... that's the only explanation possible here.
There were multiple governments operating pervasive surveillance states and using them to punish dissidents on the western part of European continent well within a human lifetime from today. What makes you think that won't happen again, this time in a completely iron-clad way?
You can just say "at this very moment".
Generally, we've seen that that was bad and I would hope that we wouldn't do it again. I did also say that I don't think it would actually work out because governments, in my original comment
(France actually ban paternity testing without a court order!)
Because the GDPR is only concerned with data collection not explicitly required by law. If a government passes a law to set up a genetic database, then that it totally fine with the GDPR.