The Dutch Parliament has expressed strong reservations about the proposed acquisition of Solvinity, a company essential to the national digital identity system DigiD, by the U.S. IT firm Kyndryl. During discussions held on January 26, 2026, MPs highlighted the potential risks associated with allowing a U.S. company to manage vital citizen data, fearing that U.S. legal frameworks, such as the Cloud Act, could affect the security and sovereignty of Dutch citizens' information.
DigiD is integral to various government services, enabling access to health care, taxes, and other critical municipal functions. Solvinity provides the IT infrastructure that supports this system and operates from a government data center, raising concerns about who could access sensitive information in the event of an ownership change.
The parliament's skepticism stems from the fear that U.S. laws could compel Kyndryl to turn over data, regardless of where it is stored. “Trump can shut down our digital government with the single push of a button,” warned MP Barbara Kathmann, underscoring the gravity of the situation.
Despite ongoing assessments by the Dutch Investment Screening Bureau, which aims to evaluate the national security implications of the deal, MPs insist on implementing stricter safeguards before the acquisition proceeds. They are urging the government to enforce regulations ensuring that data related to DigiD remains under Dutch control and is not subject to foreign legal influence.
The discussion highlights a growing unease in Europe regarding reliance on U.S. technology companies for foundational digital infrastructure, particularly as geopolitical tensions continue to rise. As privatization trends increase, the need for thorough scrutiny of supplier relationships becomes paramount to protect sensitive citizen data.
Critics within the parliament believe that alternatives must be considered to avoid excessive foreign influence and secure national digital identity systems. Some propose various routes, including enhancing contractual obligations for suppliers and exploring other options before finalizing any deal.
As the debate continues, the focus remains on maintaining the integrity of the DigiD system while navigating the complex dynamics of digital identity management in an increasingly interconnected world. Lawmakers are firmly committed to ensuring that citizen data is held safely, emphasizing that control over such vital infrastructure is essential for national sovereignty.