DigiD, the Netherlands' digital identity platform, will require European-only management under new procurement rules announced by State Secretary Eric van der Burg. The Interior Ministry's decision comes after blocking a proposed acquisition of current contractor Solvinity by US-based Kyndryl, citing national security concerns over potential American government access to sensitive citizen data.

Parliament expressed worries that US legislation could force American tech companies to provide data access or enable shutdowns. Despite Solvinity's assurances that it would prevent such scenarios, the company acknowledged it could not guarantee complete immunity from US jurisdiction. This follows advice from the Investment Review Office (BTI) that triggered last week's takeover block.

The upcoming contract tender after August 2028 will operate under the Defense and Security Procurement Act (ADV) rather than standard European procedures. This legislation restricts eligibility to European companies, effectively excluding US and other non-European entities that face similar government intervention risks. Van der Burg stated the ADV provides stronger safeguards for national security compared to regular procurement frameworks.

Additional security measures include enhanced encryption for data on both DigiD and MijnOverheid platforms, based on findings from a non-public investigation into the proposed acquisition. These changes represent a significant shift toward treating digital identity infrastructure as critical national security infrastructure rather than routine government services.