The Dutch government has intervened to block the acquisition of Solvinity, a Dutch IT company, by US-based Kyndryl, citing risks to the public interest. The decision sets a precedent in the growing tension between US technological influence and European digital sovereignty.

The heart of the controversy: DigiD and critical infrastructure

Solvinity is the company responsible for the infrastructure platform that supports DigiD, the authentication application used by Dutch citizens to access financial, tax, healthcare, and government services. DigiD is managed by Logius, a government organization under the Ministry of the Interior and Kingdom Relations of the Netherlands. The platform is hosted in a government data center, making it a national security asset.

Kyndryl, the IT services giant that emerged from IBM's spin-off, announced in November an agreement to buy Solvinity. At that time, Petra Goude, president of strategic markets at Kyndryl, stated that the acquisition would enable expanded services in modernization, innovation, and protection of sensitive workloads. However, the Dutch government considered that transferring control to a US company could compromise the security of critical data.

Implications for national security and digital sovereignty

The Dutch decision reflects a broader trend in the European Union: protecting European tech companies from foreign acquisitions, especially when they handle critical infrastructure. This move aligns with initiatives like Project Lightwell, which seeks to strengthen enterprise open-source security, and with the growing importance of identity as the new security perimeter.

Kyndryl has expressed its discontent, noting that the politicization of the process has overshadowed the benefits the operation would have brought to Solvinity's customers and Dutch citizens. However, for many experts, the decision is a necessary step to avoid dependence on foreign technologies in sensitive areas.

The geopolitical context: the technology gap between the US and Europe

This case adds to a series of tensions between the US and Europe in the technology sector. Several EU countries have emphasized the importance of keeping European tech companies within the Union, especially in sectors like cybersecurity and digital identity. The acquisition of Solvinity by Kyndryl would have been another example of how large US corporations absorb strategic European assets.

The Dutch decision also resonates with debates on data governance and AI agents, where digital sovereignty becomes a key factor for trust and security.

What does this mean for businesses and IT professionals?

For companies operating in Europe, this block sends a clear signal: protecting critical infrastructure is a government priority. Companies handling sensitive data must carefully evaluate their technology supply chains and consider European alternatives. Additionally, the decision reinforces the need for robust security configurations and understanding that the security perimeter is no longer just the firewall.

On the other hand, the Solvinity case also highlights the importance of transparency in acquisitions. As seen in the OpenClaw incident, code traceability and intellectual property are critical aspects in the digital age.

Conclusion: a turning point for digital sovereignty

The blocking of Kyndryl's purchase of Solvinity is more than a regulatory decision; it is a symptom of a paradigm shift. Europe is saying that not all acquisitions are welcome, especially when they risk national security or technological autonomy. For IT professionals, this means staying alert to regulations and preparing for an environment where digital sovereignty will be a determining factor in business decisions.

Meanwhile, Kyndryl and Solvinity will have to renegotiate or seek alternatives. What is clear is that the gap between the US and Europe in the technology sector will only widen, and cases like this will become increasingly frequent.

Original source: ComputerWorld. Analysis and adaptation by ForgeNEX.