DigiD will remain Dutch despite potential U.S. takeover of Solvinity, officials say

Dutch officials are assuring citizens that DigiD, the country’s digital identification system, will remain under national control despite concerns over a potential U.S. acquisition of Solvinity, the IT services company that operates the platform DigiD runs on.

Logius, the government agency managing DigiD, emphasized Wednesday that the system “is Dutch and remains Dutch,” even if Solvinity is acquired by the American company Kyndryl. DigiD provides secure access to government organizations such as the Belastingdienst, the Dutch tax office, encrypting citizens’ service numbers (BSN) so they remain invisible to Solvinity.

“Digital infrastructure is evolving rapidly. Governments, companies, and citizens increasingly rely on central digital services. Technological providers are often acquired by large international parties,” said Bert Voorbraak, director of Logius. He added, “If the impact analysis shows an unacceptable risk, appropriate measures will be taken immediately. The safety and reliability of Dutch citizens’ data are non-negotiable.” The deal still requires approval from regulatory authorities.

Caretaker Secretary of State for Digitalization, Eddie van Marum, also downplayed concerns. “Panic is not one of my core qualities; I am not worried,” he told NPO 1’s Goedemorgen Nederland. He stressed that while Solvinity plays a role in DigiD’s digital infrastructure, it does not control the system itself. “DigiD is Dutch and DigiD remains Dutch,” Van Marum said, adding that the government is reviewing legal, operational, and contractual implications, and may block the deal if risks are identified.

Caretaker Minister of Interior Frank Rijkaart called the potential acquisition “worrying” but has not moved to block it. Kyndryl’s purchase of Solvinity has not been finalized. “There is a U.S. market party interested. Solvinity has not yet been sold,” Van Marum said.

Concerns over U.S. control extend to legal exposure under the 2018 CLOUD Act, which allows American law enforcement to access data managed by U.S. companies. Tech expert Ben van der Burg warned, “If the acquisition goes through and Trump decides he finds the Netherlands troublesome, he could order an American company to stop doing business with the Netherlands. Then DigiD could be switched off. This is really dangerous, and the Netherlands is terribly naïve.”

Van Marum responded by highlighting ongoing national initiatives to maintain digital sovereignty, including the Dutch Digitalization Strategy (NDS) and domestic AI and cloud projects. “We are very focused on our own critical infrastructure,” he said.

Solvinity CEO Daniëlle Schuur framed the potential acquisition as an opportunity. “The takeover by Kyndryl offers more possibilities to innovate in IT management, security, and automation,” she said. “There will be no impact on the services we provide to our clients. We are in discussions with governments and other customers to clarify the proposed acquisition.”

The National Cyber Security Centre (NCSC) and the Digital Trust Center (DTC) say strong digital resilience starts with basic cybersecurity practices, not just responding to complex threats. The upcoming Cybersecurity Act, aligned with the European NIS2 directive and expected to take effect in the second quarter of 2026, will require organizations to perform risk analyses and implement appropriate security measures. Van Beurden of the National Coordinator for Security and Counterterrorism (NCTV), the government body responsible for coordinating national security and cyber defense, said, “Digital resilience is no longer just for technical experts; leaders must also act to ensure a secure digital society.”

Former VVD minister Rita Verdonk voiced confidence in the government’s stance, saying, “I am very reassured by the secretary of state’s statement. ‘DigiD is Dutch and remains Dutch.’ Okay, I trust this secretary of state.”