Privacy watchdogs, scientists, and investigative journalists are demanding clarity about the planned takeover of cloud storage company Solvinity by US company Kyndryl, which includes the transfer of  the Dutch government identity system Digid.

The deal raises concerns about privacy and national security, and undermines efforts to reduce dependence on US technology, the experts say.

Solvinity provides secure cloud and data services to a range of Dutch government clients, including the digital identification system DigiD, the MijnOverheid portal and the justice ministry. The company was chosen by Amsterdam towards the end of last year to help strengthen the city’s “digital autonomy”.

Under the US Cloud Act, cloud service providers can be required by law to make information available to the US government, even if the storage is located in Europe.

According to the group, which includes security expert Jelle Postma and Eric Smit, the founder of investigative website Follow the Money, “handing over part of our vital infrastructure to the United States increases Dutch vulnerability to blackouts, manipulation or even blackmail.”

The comments are contained in a warning letter to economic affairs minister Vincent Karremans.

“Eddie van Marum (junior foreign affairs minister) has an exaggerated and completely unjustified trust in our former allies, including the companies. We must not lean on companies which are openly supporting the authoritarian aspiration of their government,” Smit told the Volkskrant.

Solvinity and Kyndryl have registered their intended agreement at the investment vetting agency BTI which screens the consequences of investments and mergers on Dutch national security, particularly if they involve sensitive technology.

However, the results of the screening will not be made public. “We are kept completely in the dark,” Smit said. The group said it wants answers before next Tuesday or they will go to court to demand clarity about the entire process.