Dutch government blocks US company from acquisition, citing ‘risk to public interest’

The Dutch government has moved to block a major acquisition by American IT giant Kyndryl, citing concerns over the potential risk to public interest. The proposed deal would have seen Kyndryl purchase Solvinity, a Dutch cloud provider that plays a critical role in hosting the Netherlands’ online identity platform. Dutch minister for the digital economy Willemijn Aerdts announced the decision in a letter published on Monday, imposing a “complete prohibition” on the acquisition.

While the terms of the deal were not disclosed, the government’s intervention has sparked concerns over the potential for sensitive data to fall under foreign control. At the heart of the controversy is Solvinity’s role in hosting DigiD, a platform managed by the Dutch government that enables residents to verify their identity when accessing public services. The acquisition had raised fears that DigiD data could be demanded by U.S.

authorities, potentially compromising the Netherlands’ data protection laws. The Dutch government’s decision reflects growing unease among European countries about their reliance on U.S. technology giants, particularly in light of the Trump administration’s increasingly unpredictable and retaliatory approach to international relations.

U.S. law currently allows government authorities to demand that U.S. companies turn over data held in overseas datacenters, regardless of local data protection laws.

Kyndryl expressed disappointment at the decision, with a spokesperson telling Politico that the company was “extremely disappointed” by the move. The development highlights the complex and often fraught nature of international tech dealings, as governments navigate the competing demands of economic interests and national security concerns. The blocked acquisition marks a significant setback for Kyndryl, which had been looking to expand its presence in the European market.

For the Dutch government, the decision underscores its commitment to protecting sensitive data and maintaining control over critical infrastructure.