You already have an account? Log In

Why the Netherlands just blocked a US takeover — and what it signals for tech sovereignty

Posted on 26.05.2026

For decades, the global rule on cross-border tech deals was simple: if an American buyer turned up with a chequebook, European sellers picked up the pen. That assumption is fraying. The Dutch government has now formally blocked a proposed American takeover of a company that quietly underpins large parts of the country's digital identity infrastructure — a move that would have been almost unthinkable a few years ago.

For Australians watching from afar, the decision matters for more than diplomatic colour. It is a clear, public marker of how Western governments are starting to redraw the line between “normal” foreign investment and infrastructure that is simply too sensitive to hand over — and it has direct implications for how supply chains, cloud services and digital ID systems will be built in the next decade.

What actually happened in The Hague

According to reporting by Politico, the Dutch government has intervened to stop a US acquisition of a domestic company described as a “vital digital supplier.” Biometric Update reports that the bid targeted a firm embedded in the Netherlands' digital ID infrastructure — the plumbing that lets citizens log in to government services, banks and healthcare systems securely.

Once the deal was framed as a question of national security rather than ordinary M&A, the political calculus shifted quickly. Dutch officials concluded that allowing a foreign owner — even an allied one — to control the keys to citizen authentication carried risks that outweighed the commercial benefits. The takeover was blocked.

On its own, the decision is striking. Read alongside Politico's broader reporting that “the Netherlands rethinks its US tech addiction” and that “Europe begins its slow retreat from US dependence,” it starts to look less like a one-off and more like the visible edge of a structural shift.

Why digital ID is the new strategic infrastructure

Twenty years ago, the strategic assets governments fussed over were ports, power stations, telecoms backbones and defence manufacturers. Digital identity systems didn't really exist in their current form, so nobody worried about owning them.

That has changed. A modern digital ID stack does several things at once:

It authenticates citizens to government services — tax, welfare, healthcare, voting portals.
It underwrites private-sector logins for banking, telcos and increasingly everyday apps.
It generates an extraordinarily rich behavioural dataset about who logs in, when, from where, and to do what.
It is, in practice, very difficult to rip out and replace once embedded.

That combination — ubiquity, sensitivity and lock-in — is exactly what makes a piece of infrastructure “critical” in the modern sense. As the Biometric Update coverage notes, the Dutch concerns weren't abstract: they centred on what foreign ownership of that layer could mean for national security and citizen data.

It is the same logic that has driven scrutiny of Chinese investment in 5G networks, undersea cables and critical minerals. The novelty here is that the buyer is American, and the seller is one of Washington's closest allies.

The trust shock behind the decision

What changed? In a word: predictability. Politico's reporting on Europe's “slow retreat from US dependence” points to a growing sense in European capitals that American policy — on tariffs, export controls, data access and even alliance commitments — can swing sharply between administrations. When that happens, anything plugged into a US-owned platform becomes a potential lever.

European officials have watched as US authorities have used CLOUD Act powers to compel data disclosures, leaned on chip-equipment makers like ASML to restrict exports, and threatened tariffs against allies. None of those moves is necessarily wrong from Washington's perspective. But each one has reinforced the lesson that ownership equals leverage.

The Dutch decision is, in effect, a refusal to add a new lever. Blocking the takeover doesn't undo existing dependencies on US cloud providers or software vendors — those are deep and, as Politico notes, not easily unwound. But it draws a line at extending them into citizen identity.

What it means for global supply chains

For business, the immediate signal is that the menu of “safe” cross-border deals has shrunk. Three implications stand out.

1. National-security screening is now the default, not the exception

Most advanced economies — including Australia, through the Foreign Investment Review Board — have spent the last five years widening the definition of “sensitive” sectors. Data centres, cloud, cybersecurity, biometrics, critical minerals, agritech and even some consumer platforms have all been pulled into the net. The Dutch case shows regulators are increasingly willing to use those powers against allied bidders, not just adversarial ones.

2. Sovereignty premiums are appearing in valuations

If a buyer from the “wrong” jurisdiction is structurally blocked, the pool of bidders for sensitive assets shrinks. That tends to depress prices for sellers — but it also creates a premium for genuinely local or “trusted-jurisdiction” operators. Expect more European, Australian and Canadian funds to position themselves explicitly as sovereign-friendly capital.

3. Supply chains will fragment further along trust lines

Politico's framing of Europe's “slow retreat” is important: this is not a sudden decoupling. It is the gradual emergence of parallel stacks — European cloud initiatives like Gaia-X, sovereign AI compute, domestic chip-packaging capacity — that sit alongside, rather than replace, US offerings. For suppliers, that means more duplication, more compliance overhead, and more pressure to localise data, staff and code.

The Australian angle

Australia is not the Netherlands, but the parallels are sharper than they look. Canberra has its own digital ID rollout under the Digital ID Act, an expanding critical infrastructure regime under the SOCI Act, and a foreign investment framework that has already been used to block or reshape deals in data centres, rare earths and health data.

Three lessons from the Dutch decision are worth absorbing locally:

Allied does not mean unconditional. The Netherlands blocked an American buyer. Australia's deepening AUKUS and tech-cooperation ties with the US do not automatically exempt American acquirers from scrutiny when the target sits in critical infrastructure.
Identity is infrastructure. As MyGov, Digital ID and state-level systems mature, the companies providing the underlying cryptography, biometrics and authentication services become strategically significant in their own right — even if they are small and unglamorous.
Concentration risk runs both ways. Heavy reliance on a handful of US hyperscalers is a known vulnerability, but so is reliance on a single domestic vendor. Resilience requires diversity, not just localisation.

The bigger picture: from free trade to managed trust

The post-Cold-War assumption was that capital, data and technology should flow as freely as possible between democracies, and that political risk only mattered when dealing with authoritarian states. The Dutch decision — and the broader European recalibration Politico describes — punctures that assumption.

What is replacing it is messier: a system of managed trust, where even close allies are expected to demonstrate, deal by deal, that their ownership of critical assets is compatible with the host country's long-term sovereignty. It is slower, more bureaucratic and less efficient than the old model. It is also, increasingly, the world businesses and governments will have to operate in.

For Australian executives, investors and policymakers, the takeaway is not that US partnerships are suddenly suspect — they are not. It is that the era when “allied buyer” was a free pass through national-security review is over. The Dutch have just made that explicit. Others, quietly, are doing the same.