The Netherlands just drew a line in the sand that every tech executive should pay attention to. The Dutch government blocked the acquisition of Itsme, the country's ubiquitous digital identity app, by US-based private equity firm Thoma Bravo. The decision marks one of the most aggressive uses of digital sovereignty powers we've seen from a Western democracy.
For Americans, imagine if your state driver's license, Social Security card, passport, and bank login were all consolidated into one app - and then imagine the government stepping in to prevent a foreign company from buying it. That's essentially what happened here.
Itsme isn't just another app. It's used by over 6.5 million Dutch citizens (out of a population of 17 million) for everything from filing taxes to accessing healthcare records to proving age at bars. The Belgian company that built it, Belgian Mobile ID, was set to be acquired by Thoma Bravo in a deal worth hundreds of millions of euros.
But The Hague invoked national security powers under the Investment Screening Act to kill the deal. The official statement was diplomatic but clear: critical digital infrastructure that touches citizens' most sensitive data cannot be controlled by foreign entities, even allied ones.
Here's what makes this fascinating: Thoma Bravo is one of the most respected software-focused private equity firms in the world. They own Sophos, Barracuda Networks, and dozens of other enterprise software companies. This wasn't some sketchy foreign actor - this was a marquee Silicon Valley investor getting blocked by a NATO ally.
The technology is genuinely impressive. Itsme uses bank-grade encryption and biometric authentication. It's built on European privacy-first principles. The security architecture is solid. None of that mattered.
What mattered was control. The Dutch government looked at the consolidation of digital identity services globally - most of which flow through American tech giants like Google, Apple, and - and said
