Dutch Regulator Clears Path for American Purchase of DigiD Infrastructure Company

2026-03-01 data

The Hague, Sunday, 1 March 2026.
The Netherlands Authority for Consumers and Markets approved Kyndryl’s acquisition of Solvinity, which manages DigiD’s critical infrastructure used by millions of Dutch citizens for government services. While competition concerns were dismissed, national security reviews continue amid fears over American government access to sensitive data and potential service disruptions through sanctions.

ACM Approval Based on Competition Analysis

On February 26, 2026, the Dutch Authority for Consumers and Markets (ACM) formally approved the acquisition of Solvinity by American technology services company Kyndryl [1][2]. The regulator concluded that the transaction would not create or strengthen competition problems, finding that sufficient competition would remain in the market after the acquisition [3]. The ACM’s investigation specifically focused on market competition aspects, determining that public sector customers would retain adequate choice from other Dutch and European providers offering similar IT services [4]. The decision came after careful examination of market dynamics, with the ACM noting that neither Solvinity nor Kyndryl holds a particularly large market share in Dutch IT services [5].

Understanding Solvinity’s Critical Infrastructure Role

Solvinity operates as the backbone of the Netherlands’ digital government infrastructure, most notably hosting and managing the platform on which DigiD operates [6]. DigiD serves as the primary digital identification system for millions of Dutch citizens, enabling secure access to government services and platforms including healthcare providers, insurance companies, and hospitals [7]. The company’s infrastructure extends beyond DigiD to support various other critical ICT applications for the Dutch public sector [8]. This central role in digital government services explains why the acquisition has attracted significant political and public attention, as any disruption to these services could affect millions of users across the country.

Digital Sovereignty Concerns Drive Political Opposition

Parliamentary concerns have intensified around the implications of American ownership of critical Dutch digital infrastructure. A majority in the Dutch Parliament has expressed desire to prevent the acquisition, fearing that the American government could potentially access digital data through legislation or disable vital IT services as a form of sanctions [9][10]. These concerns gained particular relevance given precedent, such as when the United States imposed sanctions on the chief prosecutor of the International Criminal Court in The Hague, subsequently blocking his email access [11]. The political opposition reflects broader European anxieties about digital autonomy and dependency on non-European technology providers for essential government services.

National Security Review Still Pending

While the ACM has cleared the competition aspects, the Bureau Toetsing Investeringen (BTI), part of the Ministry of Economic Affairs, continues its separate national security assessment of the proposed acquisition [12][13]. The BTI evaluates whether foreign investments pose risks to national security, including potential threats to sensitive data access or influence over vital digital infrastructure [14]. The acquisition cannot proceed until this investment screening process is complete, with the BTI having the authority to potentially block the transaction on national security grounds [15]. The ACM shared its findings with both the BTI and the Taskforce Continuïteit ICT Dienstverlening, which operates under the Ministry of Interior and Kingdom Relations and represents public sector clients of Solvinity’s services [16].

Bronnen

digital identity infrastructure acquisition