Dutch Government Extends Digital Identity Contract Despite Parliamentary Opposition to American Ownership

2026-04-26 data

The Hague, Sunday, 26 April 2026.
The Netherlands will extend its contract with Solvinity, the company behind DigiD digital authentication, despite Parliament’s demand to terminate the deal if an American takeover proceeds. The decision prioritizes service continuity over national security concerns about potential US government access to Dutch citizens’ data through the Cloud Act.

Cabinet Decision Made Behind Closed Doors

State Secretary Eric van der Burg of the Ministry of the Interior and Kingdom Relations revealed that the Dutch cabinet had already decided on March 27, 2026, to extend Logius’s contract with Solvinity by two years [1][2][3]. The signing of this extension is scheduled to take place in early May 2026 [1][3]. This timeline is particularly significant given that on April 21, 2026, an overwhelming parliamentary majority had urged the government to abandon the contract extension if the American takeover proceeded [4]. Van der Burg’s announcement came in response to questions from JA21 parliamentarian Daniël van den Berg, following concerns raised in a Volkskrant article published on April 16, 2026 [4].

Parliamentary Opposition and Security Concerns

The parliamentary motion, supported by 141 out of 150 members with only JA21 voting against, specifically requested the government “not to renew the DigiD contract with Solvinity in 2028 if the takeover by an American company goes ahead” [5][6]. The motion was initiated by Barbara Kathmann of GroenLinks-PvdA and reflected widespread concerns about the potential acquisition by Kyndryl, a US-based technology company and former IBM subsidiary [5][7]. These fears center on the US Cloud Act, which can compel American companies to share data with the US government regardless of where the data is physically located [8]. Pieter van Oordt, Logius’s chief privacy officer, warned that after an acquisition, Americans could “shut down DigiD for extended periods and issue secret information requests” [5].

Critical Infrastructure at Stake

DigiD serves as the digital gateway for millions of Dutch citizens to access government services, from filing tax returns with the Belastingdienst to interacting with DUO or local municipalities [1]. Solvinity, based in the Netherlands with offices in Amersfoort, Assen, and Den Bosch, technically operates the infrastructure behind this critical authentication system [7]. The government’s justification for the contract extension centers on continuity concerns, with Van der Burg stating that switching providers before August 2026 would compromise “the continuity and security of Logius’s services” [3][5]. The original contract structure was designed for 48 months with the possibility of two 24-month extensions, meaning the current extension would last until 2028 [2].

Future Uncertainty and Regulatory Review

The Bureau for Investment Screening (BTI), operating under the Ministry of Economic Affairs, continues to review whether the planned Kyndryl acquisition poses national security risks, though no completion date has been announced [5]. Meanwhile, the Dutch competition authority ACM has already stated it sees no grounds to block the deal on competition terms [7]. The government has indicated that a new tender process for DigiD alternatives will begin in 2028, though tech expert Bert Hubert previously suggested that migration could be completed within six months if proper preparation had begun earlier [2][4]. The potential cost of keeping DigiD infrastructure in Dutch hands is estimated to range between 10 million and 200 million euros [2]. Van Oordt, who raised the initial security concerns, has been placed on special leave and had his work access blocked by Logius [4].

Bronnen

digital identity government contracts