Netherlands Blocks Kyndryl Solvinity Deal Over Digital Sovereignty
The Dutch government has blocked Kyndryl’s proposed acquisition of Solvinity, the Dutch cloud and IT provider involved in the management of DigiD, the national digital identity system used by citizens to access public services. The decision followed advice from the Investment Assessment Bureau under the Dutch Unwanted Control in Telecommunications Act. The central concern was that ownership by a U.S. company could expose sensitive public-sector infrastructure to foreign legal reach, including under the U.S. CLOUD Act and FISA.
The case reflects a broader shift in European digital sovereignty policy. For years, national-security scrutiny in the Netherlands and across the EU focused mainly on investors from China, Russia, and other high-risk jurisdictions. The Solvinity matter shows that U.S. ownership of critical digital infrastructure is now also being assessed through a sovereignty and public-control lens. This marks a significant change for foreign investment screening in the European technology sector.
The controversy also exposed inconsistent signals from Dutch authorities. Competition regulator ACM had previously issued a positive opinion on the transaction from a market and competition perspective, while public bodies had indicated that the risks to DigiD were manageable. The later decision to block the deal under national-security criteria created uncertainty for investors, cloud providers, and public-sector customers. It also raised questions about how clearly the Netherlands defines public order, public safety, and strategic digital dependency in acquisition reviews.
For EU digital law practitioners, the Solvinity case is a useful warning. Digital sovereignty is no longer an abstract policy term; it can now directly affect M&A outcomes, cloud procurement, and public-sector outsourcing. The Netherlands may have preserved national control over DigiD for now, but the larger challenge remains: creating predictable, transparent rules for critical digital infrastructure while supporting a strong domestic and European cloud market.
