IT supplier Solvinity in the news: what does this mean for DigiD?

There is currently considerable media attention surrounding DigiD and ICT provider Solvinity. We would like to provide you with more information about the situation and explain what this means for your DigiD.

Proposed acquisition will not proceed

The State Secretary for Economic Affairs and Climate Policy announced on Tuesday, 26 May that the acquisition of Solvinity by Kyndryl will not be permitted to proceed. This was stated in the parliamentary letter regarding the investment screening decision on Solvinity.

What does this mean for you?

You can continue using DigiD as usual. Our priority is to ensure that DigiD remains operational and that your data is always secure.

What happens next?

The government has a contract with Solvinity for the provision of the infrastructure platform until August 2028. In the meantime, preparations are being made for a new procurement process to take place in two years’ time. This procurement will be conducted under the Defence and Security Procurement Act (ADV). Through this approach, the government aims to mitigate risks to national security. The intended procurement strategy was announced in the parliamentary letter of 4 June.

Facts about DigiD

In recent months, there have been many reports in the media and on social media about DigiD. These often present inaccurate information regarding DigiD and the data it provides access to. That is why we would like to explain how it really works. DigiD is a login method that allows you to log in securely to government services, healthcare providers, educational institutions and your pension fund. DigiD only facilitates secure access to these organisations. After logging in, you can view or change your personal details, such as information about your income or health. This data is not stored or managed by DigiD. Only the organisation you have logged into does this. DigiD or a DigiD employee cannot therefore view this type of data. When you log in, DigiD only shares your BSN with the organisation you are logging into. This message is sent in encrypted form.

Do you have further questions?

Below you will find the frequently asked questions. If your question is not listed, please contact the DigiD helpdesk via digid.nl/en/contact.

Frequently Asked Questions

Will DigiD remain part of the Dutch government?

Yes. DigiD is managed by the Dutch government organisation Logius, which is part of the Ministry of the Interior and Kingdom Relations. The government determines how DigiD operates and the standards it must meet. IT specialists at Logius, such as architects and information security experts, work continuously on this. They also define the rules for the infrastructure platform and its security. Solvinity implements these requirements. They provide and manage the platform, but only in accordance with the agreements made with Logius. Solvinity employees are not permitted to make changes to or decisions about DigiD without Logius’s approval.

Can Solvinity access my data?

The data associated with your DigiD account, such as your Citizen Service Number (BSN), address and telephone number, is protected using various encryption techniques. Solvinity employees are not permitted to access this information and do not see it while carrying out management activities. A Solvinity employee could only gain access to this data through hacking methods or by using improper access rights. In such a case, the employee would be committing a criminal offence.

DigiD helps prevent this by quickly detecting suspicious activity. Only authorised administrators have access to the technology behind DigiD. In addition, we record who performs which actions and when. Confidential information, such as passwords and PIN codes, is protected against unauthorised access and misuse by others, including Solvinity employees.

Which personal data are processed by Solvinity?

Solvinity receives the IP address and email address of people with a DigiD account. Solvinity processes these data solely to ensure that DigiD functions properly. The IP address is required for the internet connection, and the email address is required for sending notifications. Strict agreements and security measures apply to protect these data. More information about DigiD’s data processing can be found at Logius | DigiD Data Processing.

Has the government examined the concerns and proposal of the Chief Privacy Officer?

The government is aware of the CPO’s proposal. The legal options put forward in it have been carefully examined and assessed, including by the State Advocate. This assessment showed that this (legal) solution is unfortunately not a viable option. This has also been communicated to the individual concerned. For more information, please refer to the answers to the parliamentary questions (in Dutch) on this matter.

Why was the contract with Solvinity extended while the possible acquisition by Kyndryl had not yet been stopped?

On 27 March 2026, it was decided to extend the contract with Solvinity by two years. This decision was made because switching to another supplier before August 2026 would not have been safe or responsible. Such a transition takes considerable time and requires careful preparation. Otherwise, the security and operation of DigiD could be put at risk. The contract extension was signed in May. Would you like to know more? Please read the answers to the parliamentary questions of Parliamentary Questions of 24 April 2026, as well as the more recent Parliamentary Questions from 6 May 2026.

Latest update: 11 June 2026

main.content