Dutch Lawmakers Raise Security Concerns Over Kyndryl Bid for Solvinity, a DigiD Infrastructure Provider

Dutch lawmakers are raising national security concerns about a planned acquisition of Solvinity by U.S. IT services firm Kyndryl, citing Solvinity’s role in providing secure cloud services used by government systems including DigiD, according to DutchNews.nl.

The takeover is under review by the Netherlands’ investment screening office, Bureau Toetsing Investeringen (BTI), which evaluates whether certain foreign investments could create national security risks. DutchNews.nl reported that a BTI national security assessment is the formal mechanism that could be used to halt the transaction if risks are confirmed.

BTI officials told lawmakers that the investigation will take several months before a recommendation is issued to the Minister for Economic Affairs. DigiD represents critical infrastructure used to access a range of public services, including tax administration, local authorities, health insurance, and pension funds.

The BTI review is assessing the takeover and will advise the Minister for Economic Affairs. With the investigation expected to take months, the outcome could influence how the Netherlands treats foreign ownership questions for providers involved in government authentication systems and other sensitive digital services.

The discussion around Solvinity reflects broader questions governments face as identity infrastructure shifts toward cloud-based operations. For national digital identity systems, operational control of hosting and managed services can be as consequential as the application layer itself, particularly when authentication is a gateway to critical public services and benefits.

For the Netherlands, BTI’s review will be closely watched as a test of how investment screening is applied to digital identity and government cloud services. DutchNews.nl reported that lawmakers were briefed on the review process, and a VVD lawmaker said his concerns had increased after that briefing.

The questions raised by lawmakers come amid broader shifts in the Dutch and European digital identity ecosystem, including the iDIN digital identification scheme and growth in local identity verification providers such as Amsterdam-based Ver.iD.

Sources: DutchNews.nl, NL Times

—

By the ID Tech Editorial Team