Dutch officials got a stark reminder last week. American tech giants don’t always play by European rules when Washington comes calling.
Microsoft shared unredacted names, emails, meeting minutes and calendar invitations from civil servants at two key Dutch agencies with the U.S. House of Representatives. The officials worked on enforcing the EU’s Digital Services Act. Their American counterparts view that law as censorship.
The revelation, first reported by Dutch investigative outlet Vrij Nederland, sent ripples through The Hague. It laid bare long-standing worries about reliance on U.S. cloud services. Those services operate under laws that compel disclosure regardless of where data sits.
The affected employees belong to the Authority for Consumers and Markets (ACM) and the Dutch Data Protection Authority (AP). Both bodies play central roles implementing DSA rules aimed at curbing illegal content, protecting users and tackling disinformation on major platforms. Major U.S. firms including Meta, Google and Amazon have faced substantial fines under the regulation.
Documents turned over to Congress contained no redactions. Names appeared plainly in correspondence, agendas and notes. This transfer happened because of the U.S. Cloud Act. The 2018 law allows American authorities to demand data from U.S. companies even if stored abroad.
Dutch officials reacted sharply. Willemijn Aerdts, state secretary for digital economy and sovereignty, raised the matter directly with U.S. Ambassador Joe Popolo. “I said how undesirable this is,” she told ANP news agency. “If you have a problem, you fight it out with us or, if necessary, in Europe, but not against the backs of civil servants.”
Eric van der Burg, state secretary for the interior, called the situation concerning. He stressed the need to first establish exactly which documents were shared and whether they had been public. The Dutch cabinet described the episode as “extremely worrying,” citing risks that named officials could face travel bans or sanctions. Similar measures hit five Europeans involved in crafting digital rules in 2025.
The incident fits a pattern. Cybernews noted on May 28 that it amplifies fears over Europe’s dependence on American technology. France, Germany and Switzerland have already begun swapping Microsoft tools for local open-source options. The Netherlands itself has pursued deals with European cloud providers to cut reliance.
Broader context makes the episode more pointed. The U.S. has long criticized the DSA as an attack on free speech. Platforms subject to its rules push back against content-moderation demands. Congress launched inquiries into what it calls “jawboning” — government pressure on tech firms to suppress certain viewpoints.
A separate DutchNews.nl report from May 23 confirmed Meta joined Microsoft in supplying names to a Senate committee examining these issues. Academics working on disinformation, including researcher Claes de Vreese, appeared in the materials too.
But the Microsoft case stands out. It involves regulators actively shaping policy that directly affects the company and its peers. Civil servants suddenly find their identities in U.S. legislative hands. Potential personal consequences loom. And the transfer occurred through routine collaboration tools many governments use daily.
Microsoft has not issued a detailed public statement on the Dutch matter. In a related 2025 controversy, the company denied blocking email access for International Criminal Court prosecutor Karim Khan after U.S. sanctions. The ICC later migrated to a European alternative called openDesk.
Legal experts point to inherent conflicts. European data-protection rules demand strict safeguards and often require consent or minimization. U.S. law prioritizes law-enforcement access. When a company like Microsoft sits in the middle, one jurisdiction usually prevails.
The Netherlands has acknowledged the bind. Both Aerdts and van der Burg have said reducing dependence on American providers will take years. Universities and government departments continue major migrations to Microsoft services even as sovereignty talk grows louder. Recent efforts include partnerships with European cloud operators and exploration of open-source stacks.
This latest episode arrives at a sensitive moment. The Netherlands recently blocked a U.S. firm from acquiring a platform handling millions of citizens’ digital IDs, citing national security. Discussions about data localization and sovereign clouds have gained urgency across the EU.
Yet practical realities persist. Microsoft dominates productivity software, enterprise email and collaboration platforms in many public-sector organizations. Switching carries huge costs and technical hurdles. Officials must weigh those against privacy and security risks that events like this make concrete.
Conversations on X in recent days reflect the tension. Users noted the irony of a company promising secure enterprise tools handing regulator identities to a foreign legislature. Others saw it as predictable given the Cloud Act’s reach. Several posts linked the story to wider calls for European technological independence.
The Dutch government continues its review. Questions remain about the precise scope of what Congress received and whether similar transfers have occurred before. Aerdts’ discussion with the ambassador may yield diplomatic reassurances. Real change, however, likely requires systemic shifts in procurement and infrastructure.
For industry observers, the story underscores a recurring truth. Data held by U.S. vendors remains accessible to U.S. authorities. No amount of regional data centers or contractual language fully insulates against that legal reality. European governments keep learning this lesson the hard way.
Whether this incident accelerates concrete moves toward alternative providers remains uncertain. Past promises of digital sovereignty have often met slow implementation. This time the names belong to the very officials tasked with regulating the platforms in question. That personal dimension may focus minds.
WebProNews is an iEntry Publication