Dutch Tax authorities opt for Microsoft for email and calendar
The tax authorities have decided to host their email and calendar services using Microsoft after all.
Published on October 2, 2025
Merien co-founded E52 in 2015 and envisioned AI in journalism, leading to Laio. He writes bold columns on hydrogen and mobility—often with a sharp edge.
The Dutch Tax and Customs Administration wants to transfer its email and calendar services to Microsoft, despite concerns about US access to sensitive data. The Dutch House of Representatives recently passed a motion calling for accelerated investment in European cloud services to reduce dependence on American tech companies. However, State Secretary Heijnen argues that no European services can offer the same level of functionality, security, and reliability as Microsoft. Experts warn that a lack of digital sovereignty puts the Netherlands at risk.
Risks and dependency
The Dutch Tax and Customs Administration's decision to store sensitive information with an American cloud service raises serious questions about the Netherlands' digital sovereignty. Privacy expert Bert Hubert warns that the American government has access to Dutch data and that dependency on American services could undermine the Netherlands' independence. After all, the US CLOUD Act allows US authorities to request data from US companies, regardless of where that data is stored. This means that sensitive information belonging to Dutch citizens, companies, and governments is potentially accessible to the US government, which is contrary to the European General Data Protection Regulation (GDPR).
Alternatives and motions
Despite the risks and the motion passed in the House of Representatives calling for investment in European cloud alternatives, the Tax and Customs Administration has opted for Microsoft. Volt, a party that considers digital autonomy to be of paramount importance, submitted the motion. Member of Parliament Marieke Koekkoek emphasized that European digital autonomy is essential for economic, technological, and national security. There are various European alternatives available, such as Tuta (Germany) and Proton Mail (Switzerland), which focus on privacy and security and offer end-to-end encryption. Even self-hosting with open-source solutions is a possibility. These alternatives could offer better data protection than the dominant American providers.
The functionality argument
State Secretary Heijnen justifies the choice of Microsoft by stating that there are no European services that can offer a comparable level of functionality, security, and reliability. However, this argument is controversial. The fact that other ministries, such as the Ministry of the Interior, use a hybrid solution in which they do use Microsoft software but store their email and files on their own servers shows that alternatives do exist. Moreover, it shows little capacity for innovation to write off European alternatives in advance without thorough research.
Disconnection of ICC chief prosecutor
The recent incident in which Microsoft cut off the British chief prosecutor of the International Criminal Court (ICC) from its services is a wake-up call. This incident shows that American companies can be pressured by the US government to discontinue services, even to international organizations. The blocking of the ICC chief prosecutor, who had issued arrest warrants for Israeli Prime Minister Netanyahu, illustrates the political risks of dependence on American technology. The fact that the ICC prosecutor subsequently switched to Proton Mail, a Swiss provider, underscores the availability of secure European alternatives.
A costly backup
To limit the risk of American interference, the Tax and Customs Administration makes a backup of all data stored in the Microsoft cloud. This backup costs €2 million per year. This is a considerable amount that could perhaps be better spent on developing and supporting European cloud alternatives. The fact that an expensive backup is necessary emphasizes the uncertainty and lack of confidence in the security of data stored with an American provider.
Digital autonomy as a priority
The Tax and Customs Administration's choice stands in stark contrast to the growing movement in Europe to promote digital autonomy. Volt wants the Dutch government to be completely independent of American tech companies by 2030 and for government services to run on open-source software. This would set a clear standard for citizens and businesses. Researcher Beijon emphasizes that independence from tech giants outside Europe requires a coordinated effort by European countries, through initiatives such as EuroStack. The current decision by the Tax and Customs Administration appears to undermine these efforts.
Conclusion: A missed opportunity
The Dutch Tax and Customs Administration's decision to host its email and calendars with Microsoft is a missed opportunity to send a powerful signal about the importance of digital sovereignty and support for European technology. Instead of investing in an expensive backup to limit the risks of American interference, the Tax and Customs Administration would be better off embracing European alternatives and stimulating innovation on its own soil. Dependence on American cloud services makes the Netherlands vulnerable and undermines the country's independence. It is time for the government to take concrete steps to reduce this dependence and safeguard the Netherlands' digital autonomy.