TL;DR
Dutch privacy groups, academics and tech experts have asked the Ministry of Economic Affairs for clarity after U.S. firm Kyndryl announced plans to buy Solvinity, the operator of the DigiD platform. The acquisition has been notified to the Bureau Toetsing Investeringen under the 2023 Wet Vifo, but experts warn of security and sovereignty risks and say it is unclear whether a substantive, public review will follow.
What happened
A coalition of privacy advocates, legal scholars and technology specialists has written to the Dutch Ministry of Economic Affairs seeking urgent transparency about the planned acquisition of Solvinity by the U.S. multinational Kyndryl. Solvinity supplies the platform that runs DigiD, the national digital ID system used by citizens to access government services. The takeover was announced in November and has already triggered questions in parliament. The parties involved have notified the deal to the Bureau Toetsing Investeringen (BTI), which brings the transaction under the Wet Vifo — the 2023 law that requires security screening of investments affecting critical infrastructure and sensitive technologies. Signatories include foundations Privacy First and Firewall, writer Maxim Februari, journalist Joris Luyendijk, security expert Jelle Postma, internet pioneer Marleen Stikker, constitutional law professor Wim Voermans and others. The group says transferring control of core infrastructure to a U.S. company raises risks of outages, manipulation or coercion, and contends U.S. law could allow American authorities access to sensitive systems. It remains unclear whether a review will be completed and, if it is, its findings will not be made public.
Why it matters
- DigiD is the primary digital identity system for Dutch citizens to access government services; changes to its operator affect a critical public system.
- A foreign purchase of the platform operator raises concerns about operational resilience, potential manipulation and leverage over essential infrastructure.
- Experts warn U.S. legal authorities could, in theory, seek access to systems or data of U.S.-owned companies, creating sovereignty and privacy implications.
- The Wet Vifo screening process is opaque to the public: even if a review occurs, its conclusions will not necessarily be released.
Key facts
- Solvinity operates the platform on which DigiD runs.
- Kyndryl, a U.S. multinational, announced plans to acquire Solvinity in November.
- The planned acquisition has been notified to the Bureau Toetsing Investeringen (BTI), invoking the 2023 Wet Vifo security screening rules.
- Foundations Privacy First and Firewall initiated the letter asking for transparency; Firewall is a newly established investigative journalism platform.
- Signatories include Maxim Februari, Joris Luyendijk, Jelle Postma, Marleen Stikker, Wim Voermans and professor Reijer Passchier.
- The letter warns of increased vulnerability to outages, manipulation or blackmail if part of the DigiD infrastructure changes to U.S. ownership.
- The group argues U.S. law could allow American authorities to demand access to sensitive DigiD data and systems.
- Parliamentary questions have already been raised about the takeover; however, it is not confirmed whether a public review will be held or published.
What to watch next
- Whether the Bureau Toetsing Investeringen completes a substantive review of the Solvinity–Kyndryl transaction under the Wet Vifo; not confirmed in the source whether a full review will occur.
- Any official clarifications or rulings from the Ministry of Economic Affairs about the oversight process and conditions applied to the sale; not confirmed in the source whether the ministry has responded.
- Statements from Solvinity and Kyndryl on proposed safeguards, operational arrangements or data residency that would address the experts' concerns; not confirmed in the source whether such statements have been issued.
Quick glossary
- DigiD: The Netherlands' national digital identification system used by citizens to log in to public services.
- Solvinity: A Dutch company that supplies the platform hosting DigiD.
- Kyndryl: A U.S.-based multinational IT services company that announced plans to acquire Solvinity.
- Bureau Toetsing Investeringen (BTI): The Dutch body responsible for screening investments that may affect national security; falls under the Ministry of Economic Affairs.
- Wet Vifo: A 2023 Dutch law requiring security screening of transactions that could threaten national security, targeting critical infrastructure and sensitive technologies.
Reader FAQ
Has Solvinity already been sold to Kyndryl?
Kyndryl announced plans to acquire Solvinity in November; the planned takeover has been notified to the BTI. The completion status of the deal is not specified in the source.
Will the takeover be reviewed for national security risks?
The acquisition has been reported to the Bureau Toetsing Investeringen and falls under the Wet Vifo, but it is unclear whether a substantive review will be carried out or what its outcome will be.
Could U.S. authorities gain access to DigiD data if Solvinity is acquired?
Signatories to the letter argue that U.S. law could allow American authorities to demand access to systems and data; the source reports this as the group's concern, not as an established fact.
Has the Dutch government publicly responded to these expert warnings?
The experts have asked the Ministry of Economic Affairs for transparency. The source does not confirm an official government response.
Image Dutch and American flags – Credit: sezerozger / DepositPhotos – License: DepositPhotos BUSINESS TECH DUTCH MINISTRY OF ECONOMIC AFFAIRS AND CLIMATE MINISTRY OF ECONOMIC AFFAIRS MINISTRY OF ECONOMIC AFFAIRS…
Sources
- Dutch experts warn US takeover of DigiD platform poses security risks
- US access to Dutch DigiD data raises red flags
- DigiD will remain Dutch despite potential U.S. takeover of …
- US takeover bid for Dutch cloud firm behind DigiD sparks …
Related posts
- Elite: The Palantir Map App ICE Uses to Identify Neighborhood Raid Targets
- Trump Administration’s Minnesota Playbook Targets California and New York
- Why ICE Agents Have Been Able to Kill With Apparent Impunity