IMPLICATOR
The Netherlands blocked Kyndryl’s planned acquisition of Solvinity on May 25, 2026, after the Dutch Investment Screening Bureau advised a complete prohibition, State Secretary Willemijn Aerdts told parliament in a two-page letter. The bureau found the deal posed a possible risk to the public interest under the Dutch telecom-control statute known as WOZT, and Reuters valued the transaction at about €100 million, or $113 million. Reuters called it the first U.S. acquisition the bureau has blocked since it was created in 2020, and the case turns on control of a supplier that sits behind DigiD, the national digital-identity system.
Key Takeaways
- The Netherlands blocked Kyndryl's Solvinity deal after BTI advised a complete WOZT prohibition.
- Solvinity supplies DigiD infrastructure but does not own the Dutch identity service.
- ACM cleared the deal on competition grounds; investment screening stopped it on public-interest grounds.
- The next DigiD contract now becomes a test of control-based cloud sovereignty.
AI-generated summary, reviewed by an editor. More on our AI guidelines.
What the screening bureau found
Kyndryl notified Dutch screeners on Nov. 21, 2025, which put the review at just over six months, and the letter carries the file number DGED / 106541170. Aerdts published the bureau’s conclusion rather than the underlying BTI file, writing in translation that the acquisition “may pose a risk to the public interest.” Her letter quoted the advice directly: “The BTI has advised me to impose a complete prohibition on this acquisition.”
Aerdts told NOS, in translated remarks, that she had not taken the decision lightly. “It is a decision I did not take lightly, because intervention in the market is a serious measure,” she said. “But the fact that we could not remove the risks and could not guarantee the public interest makes intervention necessary.”
Solvinity’s role under DigiD
Logius says DigiD remains a government service, and its public FAQ states that Solvinity “is a supplier of DigiD, not the owner or developer of the software.” By that account, Solvinity did not own the Dutch login system itself.
The supplier still sat under a system that logged 550,153,271 successful authentications across 16,829,696 accounts in 2024, according to Logius. The Hague court record states that Solvinity built and technically manages the Picard platform, the infrastructure on which DigiD and other Logius applications run.
Switching suppliers quickly carried its own risk. DigiD said changing suppliers before August 2026 “would not be safe or responsible,” and in court the State estimated a careful transition would take six to eight months. The court acknowledged the exposure, writing in translation that “the State acknowledges that there are risks,” and allowed the contract to continue.
Competition regulator cleared the deal
The competition regulator had already cleared the transaction. ACM said “concerns about digital autonomy are not the result of competition problems,” pointing to limited market shares and available Dutch and European alternatives.
Track the cloud sovereignty fight
Strategic AI news from San Francisco. No hype, no "AI will change everything" throat clearing. Just what moved, who won, and why it matters. Daily at 6am PST.
No spam. Unsubscribe anytime.
The investment-screening review reached the opposite conclusion. Bird & Bird’s March analysis of the ACM decision noted that competition law could weigh whether Kyndryl and Solvinity reduced market choice but could not address whether U.S. ownership changed the control risk for a government identity supplier mid-contract. Kyndryl framed the block as political, saying it was “extremely disappointed” and that “the politicization of this process” had overshadowed benefits for Solvinity customers and Dutch citizens.
Aerdts’ letter describes the review as “country-neutral, risk-based and proportionate.” Kyndryl points to its long history managing mission-critical work in the Netherlands.
The next DigiD contract
Part of the concern about U.S. ownership rests on American law, though the Dutch prohibition itself rests on WOZT. The U.S. CLOUD Act can require covered providers to produce records within their “possession, custody, or control” even when the data is stored outside the United States. The provision creates a conflict-of-laws exposure for a foreign-owned supplier; it does not by itself transfer DigiD data to U.S. authorities. The Implicator covered the same dispute in April, when European cloud groups pressed Brussels to tie sovereignty to control of the provider, the standard at issue in the Solvinity case.
The current Solvinity contract runs to Aug. 6, 2028, and NOS quoted Eric van der Burg, the state secretary responsible for the next contract, saying “We will now look at which tender requirements we are going to set,” and adding, “Of course, we will learn from the past as we do so.” Kyndryl can challenge the decision in court, and until a new tender is awarded the government keeps running DigiD and the other Logius services on Solvinity’s Picard platform.
Frequently Asked Questions
What did the Dutch government block?
State Secretary Willemijn Aerdts blocked Kyndryl's planned acquisition of Solvinity after Dutch investment screeners advised a complete prohibition under WOZT.
Does Solvinity own DigiD?
No. Logius manages DigiD. Solvinity supplies the infrastructure platform on which DigiD runs and hosts it in a government data center.
Why did ACM clear the deal?
ACM said the deal did not create a competition problem because buyers still had other Dutch and European IT providers available.
Why did the deal still fail?
BTI reviewed the acquisition under a public-interest and digital-infrastructure control test, then advised a complete prohibition.
Why does the CLOUD Act matter here?
It can require covered U.S. providers to produce data within their possession, custody or control, creating legal exposure even when data is stored abroad.
AI-generated summary, reviewed by an editor. More on our AI guidelines.
Marcus Schuler
Editor-in-Chief and founder of Implicator.ai. Former ARD correspondent and senior broadcast journalist with 10+ years covering tech. Writes daily briefings on policy and market developments. Based in San Francisco. E-mail: [email protected]
