alt Hacker NewsContext: DigiD is the Dutch national infrastructure for authenticating to government (and semi-government) services. It's used for anything from doing taxes to checking the status of your pension.
The company that basically runs it for the government is being sold to an American investment company, which brings with it obvious national security risks.
Replies
Are there not already risks that exist from it relying on US run devices?
The company that runs it for the government, or the company who owns it for the government?
If the government owns the infrastructure, but outsources the day-to-day running to a company that's one thing. But if the infrastructure is owned by the third party then that's a lot harder to deal with.
It is kind of sticky situation for the country that is debating data sovereignty.
Oh, the joys of public infrastructure privatization...
There's a lesson to be learnt here, extending beyond digital infrastructures.
The Dutch government should have outsourced DigiD hosting to SURF [1] which already had extensive experience with cloud services and is virtually immune to foreign influence.
[1] https://www.surf.nl/