The Netherlands Blocks American Takeover of DigiD's Digital Backbone, Signaling a New Era of Digital Sovereignty
The Hague, Saturday, 30 May 2026.
The Dutch government has blocked U.S. firm Kyndryl from acquiring Solvinity, the company running DigiD — used by millions of Dutch citizens daily. Yet broader American tech dependency remains deeply entrenched.
A Decision Years in the Making
On Tuesday, May 26, 2026, State Secretary Willemijn Aerdts (Digital Economy and Sovereignty, D66) formally blocked the acquisition of Dutch IT company Solvinity by American firm Kyndryl, acting on a binding negative recommendation from the Bureau Toetsing Investeringen (BTI) — the Netherlands’ investment screening body — under the Wet ongewenste zeggenschap telecommunicatie (WOZT), the law governing unwanted control over telecommunications infrastructure [1][4][5]. The decision was not sudden. Kyndryl had officially notified the intended acquisition on November 21, 2025 [5], triggering months of intense parliamentary scrutiny, public pressure campaigns, and behind-the-scenes diplomatic friction reportedly linked to the geopolitical posture of U.S. President Donald Trump [1].
What the BTI Found — and Why It Matters
The BTI concluded that the proposed acquisition posed risks to national security, digital autonomy, and the protection of the Netherlands’ vital infrastructure [5]. The screening body determined that the deal could expose critical Dutch government services to American legislation that can compel U.S.-based companies to share data with American authorities — a concern raised extensively in both parliamentary debate and public discourse [3][4]. The WOZT gives the Dutch cabinet the authority to block acquisitions in digital infrastructure where public interests are at risk, and Aerdts stressed that the decision was taken on a ‘country-neutral’ basis, not as a measure specifically targeting American firms [4]. Nevertheless, the practical reality is that this marks only the second time in the BTI’s six-year existence that a merger or acquisition has been formally prohibited, and it is the only such case to have been made public [2].
Broad Political Support — and a Warning From Legal Experts
The blocking of the Solvinity deal enjoyed near-unanimous political support. Almost every party in the Dutch parliament — with the exception of one — publicly opposed the acquisition, and public advocacy campaigns drew thousands of citizens to sign petitions against it [3]. The case became a focal point for a much larger debate about digital sovereignty that has been growing in urgency since the formation of the Jetten cabinet in February 2026, when the government’s tone shifted explicitly toward voicing concerns about U.S. influence over Dutch ICT infrastructure [1]. Senator Ferd Crone (PRO, GroenLinks-PvdA) articulated the broader historical dimension, stating: ‘Sectors that in earlier years came into foreign hands, we would now count as a basic industry that you, as the Netherlands, as Europe, should want to retain. Think of the steel industry, but also telecoms and the entire digital sphere’ [1].
The Bigger Picture: How Deep Does American Tech Dependency Go?
While the Solvinity decision has been widely celebrated as a victory for digital sovereignty [3], a sober assessment of the Netherlands’ broader digital landscape reveals how entrenched American technology dependency has become. The Dutch Tax Authority (Belastingdienst), Customs (Douane), and the Benefits Agency (Dienst Toeslagen) are in the process of migrating to Microsoft’s office automation suite — a transition described by State Secretary Eelco Eerenberg (Fiscal Affairs) as too far advanced to reverse [2]. The Ministry of Finance has signed a twenty-year, non-reversible contract with American firm Fast Enterprises for a new ICT system to handle VAT collection [2]. And Dutch cybersecurity company Zivver — which provided secure email services to public institutions including the UWV, prisons, the Public Prosecution Service, courts, and municipalities — was acquired by American firm Kiteworks in 2025, after which the Dutch Immigration and Naturalisation Service (IND) terminated its contract [2].
A Regulatory Apparatus Scaling Up — But Fast Enough?
The institutional capacity to screen and intervene in potentially sensitive acquisitions is expanding rapidly. The number of cases handled by the BTI rose from approximately 30 in 2023 to 91 in 2025 — a growth rate of 203.333 percent over two years [1]. Defence suppliers are also soon to fall under the scope of the Wet veiligheidstoets investeringen fusies en overnames, broadening the BTI’s mandate further [1]. Looking ahead to the end of 2026, the Ministry of Economic Affairs has a legislative proposal ready that would classify between 1,015 and 1,730 additional companies in biotechnology, artificial intelligence, nanotechnology, and nuclear technology as (highly) sensitive, bringing them under BTI oversight [1]. This represents a significant expansion of the state’s capacity to intervene in investment decisions on national security grounds.
Between Protection and Pragmatism
Senator Crone captured the central dilemma with precision: ‘Back then, liberalisation was the name of the game. Now it is the mirror image. The feeling now is that the government should just do everything itself — but that is not the answer either’ [1]. The Solvinity decision, and the cabinet’s extension of its contract with the company through 2028 [4], buys time. But it does not resolve the structural question of what a digitally sovereign Netherlands looks like in practice — particularly when so much of the country’s public digital infrastructure is already deeply integrated with American platforms, contracts, and systems that predate the current political moment. The outcome of parliamentary debates in the coming months, and the passage or failure of the Ministry of Economic Affairs’ planned legislative expansion before the end of 2026 [1], will determine whether this moment marks a genuine turning point or a symbolic gesture in an otherwise unresolved dependency.