The growing tension between US technological influence and European digital autonomy has reached a new milestone. The Dutch government has decided to block the acquisition of Solvinity, a Dutch IT company, by US giant Kyndryl, arguing that the operation poses a risk to the public interest. This decision sets a precedent in the protection of critical European infrastructure.

What is at stake? DigiD, the heart of Dutch digital identity

Solvinity is not just any IT company. It provides the infrastructure platform for DigiD, the digital authentication system used by Dutch citizens to access financial, tax, healthcare, and government services. DigiD is managed by Logius, a government organization under the Ministry of the Interior and Kingdom Relations, and its platform is hosted in a government data center. The reliance on an external provider for such sensitive infrastructure was already a concern, but the potential acquisition by a US company raised alarms.

Kyndryl, the IT services giant that emerged from IBM's spin-off, announced in November an agreement to buy Solvinity. At that time, Petra Goude, President of Kyndryl's Strategic Markets, highlighted that the acquisition would enable expanded services in modernization, innovation, and protection of sensitive workloads. However, the Dutch government saw more risks than benefits.

Government decision: a shield against foreign dependence

According to Politico, the Dutch government blocked the deal citing a potential risk to the public interest. This measure is part of a context where several EU countries have emphasized the importance of keeping European tech companies under European control, especially when they manage critical infrastructure. The technology gap between the US and Europe is widening, and decisions like this aim to protect digital sovereignty.

Kyndryl's reaction was swift. In a statement, company representatives regretted that the politicization of the process overshadowed the benefits the deal would have brought to Solvinity's clients and Dutch citizens. However, for many security experts, the decision is correct: allowing a foreign company to control national authentication infrastructure could open the door to espionage or interference risks.

Implications for the IT industry and national security

This case highlights the need for European companies to strengthen their technological autonomy. At ForgeNEX, we have previously analyzed how configuring secure VPNs and firewalls is only part of network security; infrastructure ownership is equally critical. We have also seen how vendor neutrality in OpenTelemetry is not a magic solution if ultimate control lies in foreign hands.

The Dutch decision could set a precedent for other European countries. For example, Spain is advancing initiatives like EuroQCS-Spain, a 100% European quantum computer that challenges technological dependence. In the realm of digital identity, the identity layer for AI agents also requires sovereign control.

The future of tech acquisitions in Europe

This block is not an isolated case. The European Union is tightening its stance on acquisitions of strategic tech companies by non-EU firms. Business productivity with Microsoft 365 is an example of how dependence on a US provider can be successful, but when it comes to critical infrastructure, the balance tips toward national protection.

For IT professionals, this case underscores the importance of evaluating not only technology but also the origin and control of providers. Implementing generative AI in workflows can be a driver of innovation, but it must be done with providers that guarantee data sovereignty.

In conclusion, the blocking of Kyndryl's acquisition of Solvinity is a clear signal that Europe is willing to defend its digital sovereignty, even if it means curbing foreign investments. The question now is: will other countries follow this example?

Original source: ComputerWorld. Analysis and adaptation by ForgeNEX.