Dutch Government Halts Kyndryl Takeover of DigiD Operator Over Security Risks
The government of the Netherlands has prevented US enterprise services company Kyndryl from buying the cloud firm Solvinity due to concerns over national security and public interest issues. Solvinity serves an important purpose within the Dutch digital landscape by offering a secure managed cloud environment and hosting vital national systems such as DigiD.
This marks a trend across Europe, as governments are tightening controls over critical digital infrastructure and minimizing dependence on foreign tech companies.
The acquisition of the Dutch cloud service firm Solvinity by Kyndryl was announced in November 2025. The firm claimed that the purchase would boost their portfolio for mission-critical cloud and enterprise services.
Dutch Government Rejects Acquisition of Key Digital Infrastructure Provider to Protect National Security
One of the vital digital identification systems in the Netherlands, DigiD is used by citizens for accessing public services, verifying their identity, scheduling medical appointments, and handling issues related to housing or the government.
Due to the extensive use of the platform in the Netherlands, the system is considered an integral part of critical digital infrastructure in the country.
The acquisition was reviewed by the Dutch Investment Screening Bureau, popularly called BTI. The agency is responsible for reviewing significant acquisitions involving digital infrastructure, among other industries relating to national security.
After considering the deal, the BTI advised the government to reject it. The Dutch state secretary for Digital Economy, Willemijn Aerdts, announced the government’s decision to turn down the deal at the end of May. According to the government officials, the completion of the deal would likely undermine Dutch control over an essential portion of the local cloud industry.
Analyzing the Dutch Rejection of the Kyndryl-Solvinity Deal
According to Dutch government officials, their rejection of the deal is not meant to target the US or its companies. Instead, the officials claimed that the screening process involved a risk-based approach that was country-neutral. Furthermore, according to government representatives, foreign technology companies will always be welcomed in the Netherlands.
Nevertheless, it is also clear that the Dutch government is not ready to sacrifice its ability to make an independent assessment of investments that may impact its national security or interests.
The response from Kyndryl was rather fierce. According to the company, it is “extremely disappointed” with the ruling and claims that the Dutch government has politicized the situation. The acquisition would serve the customers of Solvinity and help Dutch citizens through enhanced cloud services.
The current scenario exemplifies the overall process taking place in Europe. As noted, European policymakers have made their efforts aimed at obtaining “digital sovereignty.” It implies giving the Europeans more independence in relation to their own data, cloud infrastructure, and digital services.
This development is connected with the ongoing divergence between Europe and the U.S. regarding their policies in technology-related matters. Specifically, European regulators fear relying too much on foreign cloud service providers in spheres dealing with sensitive data.
How EU Sovereignty Policies Are Reshaping the Cloud Landscape
According to predictions, the EU will soon unveil a “Tech Sovereignty Package” designed to help local cloud services and limit reliance on foreign Big Tech firms.
In case this measure will be adopted by policymakers, it would affect significantly the landscape of cloud solutions operating in the EU. US technology giants like Microsoft, Google, or Amazon will be compelled to comply with additional regulations concerning management of sensitive data connected to medicine, financial operations, law services, and public administration.
Data protection regulation plays an important part in Europe’s approach to digital issues. GDPR rules provide very specific guidelines concerning the process of collecting, processing, and storing personal data. In addition to existing legislation, sovereignty regulations might emerge to impose additional limitations on foreign providers.
Perhaps, this case involving the Dutch government’s position on Kyndryl and Solvinity will serve as an indicator of how such policies can shape upcoming mergers, acquisitions, and cloud agreements. It seems that European governments will be more assertive whenever there is a deal which revolves around a digital system involved in government service and citizen information.
There seems to be a clear indication for the tech firms out there: access to the European market will not depend only on their expertise and benefits anymore. Government considerations regarding sovereignty and territorial control over the digital systems are now considered of higher importance.
With Europe moving toward digital sovereignty, both European and US companies will have to adapt to a new playing field dominated by sovereignty concerns.
Comments are closed.