Dutch Privacy Official Sues Government to Block US Takeover of National Digital ID System
Amsterdam, Thursday, 16 April 2026.
Netherlands’ top privacy officer is taking legal action against his own government to prevent American company Kyndryl from acquiring Solvinity, which manages DigiD - the digital identity system used by 17 million Dutch citizens daily. Internal security assessments warn that US laws could allow American authorities to access sensitive personal data and potentially shut down the entire system for extended periods.
Legal Challenge Against Data Sovereignty Breach
Pieter van Oordt, the central privacy officer at Logius, has initiated legal proceedings against the Dutch state to block the acquisition of Solvinity by American technology giant Kyndryl [1][2]. Van Oordt announced on April 1, 2026, his intention to start a court case against the ministry and the State of the Netherlands, citing concerns about digital sovereignty and citizen privacy protection [3]. The privacy officer has launched a crowdfunding campaign to cover legal costs, stating his decision to “ask society for support” and start proceedings against his employer for disadvantaging him due to his stance on digital sovereignty [2]. This unprecedented legal challenge represents the first time a senior government privacy official has sued their own administration over data protection concerns in a foreign acquisition.
Critical Infrastructure Under Foreign Control
The proposed takeover threatens to place DigiD, used by 17 million Dutch citizens for accessing government services, hospitals, and pension funds, under American legal jurisdiction [1][4]. The system processes approximately 2 million login sessions daily, making it one of Europe’s most critical digital identity infrastructures [1]. Beyond DigiD, Solvinity also manages IT systems for the National Police, the Public Prosecution Service, the judiciary, and the municipality of Amsterdam, amplifying security concerns across multiple government agencies [1]. An internal Logius security assessment shared with the Ministry of the Interior on November 24, 2025, explicitly warned that “the platform cannot be technically sealed in such a way that the supplier would no longer be able to access data/personal information or influence availability” [1][3].
Public Opposition and Security Warnings
A Radar Panel survey conducted in March 2026 revealed that 87% of DigiD users would stop using the system if it came under U.S. ownership, indicating massive public resistance to the foreign takeover [1][3]. Van Oordt has been vocal about the risks, stating: “I cannot put it more simply: the U.S. can switch off DigiD for an extended period and issue secret information requests” [1][4][5]. The privacy officer warned that “additional measures are in all cases insufficient to prevent outages of DigiD and unlawful use,” directly contradicting government assurances about data protection [1]. His concerns stem from U.S. laws including the Cloud Act and Foreign Intelligence Surveillance Act (FISA), which could compel Kyndryl to provide access to Dutch citizen data or disrupt services under American sanctions legislation [3].
Government Resistance and Limited Legal Options
Despite escalating concerns to “the highest civil-service level,” Van Oordt reports that his warnings have been ignored, and he was denied access to the State Secretary of the Interior [1][3][5]. The Ministry of the Interior has dismissed alternative plans to prevent the sale as “geen serieuze optie” (not a serious option), citing limited legal means to block the transaction [1][5]. A senior government source acknowledged that “from that perspective, the legal means to stop it are limited,” while noting that “there is still a belief within part of the government that the U.S. is an important ally” [1]. The Dutch competition authority (ACM) has already approved the deal in February 2026, while the Bureau Toetsing Investeringen (BTI) continues investigating potential national security implications to advise Economic Affairs Minister Heleen Herbert, who holds final approval authority [1][3][5].