Dutch tax authorities cancel Microsoft 365 cloud rollout – and turn toward open source
Original reporting by ZDNet
The Netherlands Tax and Customs Administration has abandoned its planned Microsoft 365 public-cloud rollout, marking a significant step in Europe's accelerating pursuit of digital sovereignty. This decision, following an internal ICT assessment and affecting some 5,000 already-migrated employees, stems from profound concerns regarding information security, data confidentiality, and vendor lock-in. The assessment revealed shortcomings in the proposed public-cloud design, specifically citing issues with sending confidential documents through American servers, reliance on standard Microsoft encryption over more controlled options, and the absence of default end-to-end encryption for Teams calls. These factors, coupled with reduced flexibility and an inadequate exit strategy, underscored a deeper mistrust of relying on non-European cloud providers.
A Wider European Shift
This move by the Dutch government is not isolated but reflects a growing continent-wide trend. A recent Linux Foundation Europe report reveals that 94% of EU organizations prioritize digital sovereignty, underscoring a collective desire to control their digital infrastructure and data. Countries like Switzerland, Germany, France, and Austria have already begun shifting to Linux and open-source alternatives, aiming to reduce dependence on proprietary foreign software and foster digital autonomy. The Netherlands now plans an on-premises approach for email and calendar by 2027, followed by European open-source solutions for personal storage and collaboration in 2027 and 2028. While specific open-source choices like NixOS, La Suite, or MijnBureau remain under consideration, the direction is clear: towards greater autonomy and control over their digital future.
The Netherlands’ decision to abandon its Microsoft 365 cloud rollout for the Tax and Customs Administration marks a pivotal moment, underscoring the escalating demand for digital sovereignty among European governments. Driven by critical concerns over information security, data control, and the pervasive threat of vendor lock-in, the move reflects a broader skepticism towards reliance on non-native, proprietary cloud infrastructure. While the immediate replacement strategy for core office functionalities remains a hybrid of existing Microsoft on-premises solutions and future open-source alternatives, the long-term trajectory is clear: a concerted effort towards greater technological autonomy and self-reliance.
A Wider Shift
This action by the Dutch government is not an isolated incident but rather a significant confirmation of a widespread trend across Europe. Coupled with similar initiatives from Switzerland, Germany, France, and other nations, it signals a powerful collective drive to reduce dependence on major US-based tech providers. The Linux Foundation Europe's findings, which highlight that 94% of EU organizations prioritize digital sovereignty as highly as AI, underscore the profound political and economic imperative behind these decisions. As AI integration accelerates across all sectors, the control over data and critical infrastructure becomes even more paramount, weaving digital sovereignty into the fabric of national security and economic resilience. The future will likely see increased investment in pan-European open-source ecosystems and collaborative projects like DAWO, fostering local innovation and creating a more diverse, resilient digital landscape less susceptible to external pressures. This momentum could reshape the global tech market, promoting localized digital solutions and potentially influencing how governments worldwide approach their critical IT infrastructure and data governance in an increasingly interconnected yet fragmented digital world.
Frequently asked questions
- Why did the Netherlands stop its government agency's shift to Microsoft 365?
- The Netherlands' Tax and Customs Administration halted its Microsoft 365 public-cloud rollout due to concerns over digital sovereignty and information security. An assessment found shortcomings in data confidentiality, control, and future-proofing, specifically citing reliance on US servers, standard Microsoft encryption, and vendor lock-in. The decision reflects a broader European push for greater autonomy over government data infrastructure and IT solutions.
- What is digital sovereignty and why is it important for European governments?
- Digital sovereignty refers to a nation's ability to control its own data, infrastructure, and digital policies, reducing reliance on foreign technology providers. For European governments, it's crucial for ensuring data confidentiality, resisting vendor lock-in, and maintaining strategic autonomy. It helps protect sensitive government information from external access or influence, aligning with national security and privacy priorities.
- What are the Netherlands' future plans for its government's IT infrastructure and software?
- The Netherlands' Tax and Customs Administration is moving towards an on-premises email and calendar environment by 2027, followed by European open-source solutions for personal storage and collaboration in late 2027 and 2028. This transition aims for a more sustainable and autonomous digital environment. The government is exploring options like the Linux distribution NixOS and open-source office suites such as La Suite, openDesk, or MijnBureau.