Dutch gov't will only allow European company to operate DigiD platform

The next company to manage part of DigiD must be European, State Secretary Eric van der Burg of Interior wrote in a letter to parliament. The tender for the contract after August 2028 will be conducted via the Defense and Security Procurement Act (ADV).

“The reason for this is that the ADV offers more possibilities than a regular European tender to limit risks to national security,” said the VVD Cabinet member. The ADV stipulates that only European companies are eligible to guarantee security.

Currently, DigiD is partially managed by Solvinity, a company owned by a British investor. The American company Kyndryl wanted to acquire that company.

The Cabinet blocked that takeover last week following advice from the Investment Review Office (BTI). Parliament was concerned that the U.S. government would gain access to DigiD or could shut it down via Kyndryl.

The company itself stated that it would do everything possible to prevent this, but could not guarantee that it was impossible. Due to U.S. legislation, the government there can intervene excessively or request data from American tech companies.

By conducting the next tender through the ADV, countries with such legislation are excluded from the management of DigiD, Van der Burg said.

The State Secretary also said that data on DigiD and MijnOverheid will be better encrypted following recommendations from a non-public investigation into the possible acquisition of Solvinity by Kyndryl.