Netherlands Blocks First U.S. Tech Takeover in Historic Decision, Affirming Digital Sovereignty

THE HAGUE — In a landmark ruling that marks the first time the Netherlands has blocked a United States acquisition under its foreign investment screening process, the Dutch government has prohibited an American technology company from purchasing a critical Dutch cloud services provider.

The decision, announced Tuesday by the State Secretary for Economic Affairs, halts Kyndryl’s proposed acquisition of Solvinity, a Dutch firm that operates DigiD, the national digital identity system used by nearly 18 million citizens to access government services, tax records, healthcare data and pension information.

The move comes after months of sustained public pressure, legal challenges and parliamentary scrutiny from citizens, privacy advocates, journalists and technology experts concerned about national data security.

Citizens Drive Historic Outcome

What began as a relatively low-profile corporate transaction evolved into a significant test of European digital sovereignty. Dutch citizens and advocacy groups mounted an unusually robust campaign, filing lawsuits, organizing parliamentary motions and pushing for transparency in the investment review process.

The Investment Screening Bureau, the Dutch agency responsible for evaluating foreign takeovers for national security risks, ultimately concluded that the deal posed potential threats to the public interest. The government issued a complete and permanent prohibition.

The transaction, valued at approximately €100 million, would have placed a company managing highly sensitive citizen data under American ownership.

Core Concerns: Data Jurisdiction

At the heart of the opposition was the U.S. CLOUD Act, which allows American authorities to compel companies under U.S. jurisdiction to provide data stored anywhere, regardless of local privacy laws.

Opponents argued that placing DigiD under a U.S.-linked company would expose Dutch citizens’ personal information to potential foreign government requests beyond Dutch legal protections.

Dutch lawmakers responded decisively. Parliament passed a motion with near-unanimous support demanding that the government refuse to renew Solvinity’s contract for DigiD if the acquisition proceeded.

A Broad Coalition Prevails

The legal challenge was spearheaded by investigative journalist Eric Smit, co-founder of the platform The Firewall. He was joined by prominent authors, academics, privacy organizations such as Privacy First, and other digital rights activists.

The coalition’s court appearance came just days before the government’s announcement. Advocates described the outcome as validation that public mobilization can influence decisions involving critical national infrastructure.

Solvinity confirmed it would remain independently Dutch-owned and continue focusing on secure IT services for its clients. Government discussions on the future of the DigiD contract are expected in the coming weeks.

Kyndryl’s Disappointment

Kyndryl, an IBM spin-off, expressed strong disappointment. The company described the decision as politicization of a process that could have delivered technological benefits.

Dutch officials, however, maintained that the review followed standard national security protocols. State Secretary Erik van der Burg stated that the government did not anticipate significant American retaliation, emphasizing that such considerations routinely factor into investment screenings in both countries.

Part of a Wider European Trend

The Dutch decision does not stand in isolation. It aligns with a broader European push for technological sovereignty.

Across the continent, governments are tightening controls over critical digital infrastructure. The European Commission has moved to limit certain American providers’ access to sensitive government data and is advancing plans for independent European cloud capacity and satellite systems.

In the Netherlands, the ruling reinforces existing initiatives, including migration of government workloads to European-owned providers and development of a sovereign military cloud involving KPN and Thales.

Precedent for Future Reviews

Analysts say the case establishes an important precedent. It is the first outright block of a U.S. acquisition by the Dutch screening body, likely to influence how similar proposals are evaluated across Europe.

The successful citizen-led campaign may also serve as a model for public engagement on digital infrastructure issues in other countries.

For now, the Netherlands has ensured that its primary digital identity system remains under domestic control and subject to Dutch law.

The outcome reflects growing wariness among European nations about ceding oversight of sensitive citizen data to foreign jurisdictions amid evolving geopolitical tensions.

Officials have indicated that the DigiD system will likely transition to fully European-owned infrastructure within the next two years, either through continued Dutch ownership of Solvinity or through other approved providers.

Balancing Security and Innovation

The episode highlights the tension between attracting foreign investment and protecting strategic assets. While the Dutch government values international technology partnerships, it has drawn a clear line when core public services and citizen privacy are at stake.

Supporters of the block view it as a necessary assertion of sovereignty. Critics worry it could deter beneficial foreign investment and slow technological advancement.

As Europe continues to navigate its digital future, the Netherlands’ decision adds momentum to a continental conversation about data control, security and independence in an interconnected world.

The citizens who organized, litigated and advocated have demonstrated that public pressure can shape outcomes on issues of vital national importance.