2 hours Ago
Why the Change Is Happening
State Secretary Eric van der Burg of Interior Affairs informed parliament that the next contract for DigiD management, due after August 2028, will be processed through the Defense and Security Procurement Act, commonly known as the ADV. This specific legal framework allows the government to go beyond standard European tender rules and apply stricter security-based restrictions. Under the ADV, only European companies qualify, which effectively shuts out firms from countries with laws that could allow their governments to demand access to sensitive data.
This decision did not come out of nowhere. It follows a recent attempt by American technology company Kyndryl to acquire Solvinity, the Dutch firm currently handling part of DigiD's operations. Solvinity is owned by a British investor. The Cabinet blocked that acquisition last week after receiving advice from the Investment Review Office. Lawmakers had raised serious concerns that U.S. legislation could give American authorities the ability to access DigiD data or even disrupt the service entirely. Although Kyndryl stated it would work hard to prevent such interference, it could not provide a firm guarantee that outside intervention was impossible.
What Comes Next
Beyond the new tender rules, Van der Burg also announced that data stored on DigiD and MijnOverheid will undergo stronger encryption. This follows recommendations made in a non-public investigation into the potential Kyndryl-Solvinity deal. By routing the next contract through the ADV and upgrading encryption standards, the government aims to ensure that one of the country's most critical digital services stays firmly under European control.
