Microsoft Cancels Dutch Tax Authority's Planned Switch to Microsoft 365

The Netherlands' Tax and Customs Administration has unexpectedly canceled its planned rollout of Microsoft 365 public-cloud services. This decision comes as European organizations increasingly prioritize digital sovereignty, a concept that emphasizes control over data and technology.

According to a recent report by the Linux Foundation, 94% of EU organizations consider digital sovereignty important, with 61% deeming it very important. Thierry Carrez, the Linux Foundation Europe GM, emphasized this trend during his keynote address at the Open Source Summit Europe conference, stating that "Europe has clearly heard the message on digital sovereignty."

The importance of digital sovereignty is not limited to European organizations; countries around the world are also recognizing its value. As Nithya Ruff, chair of the Linux Foundation board, noted in an interview onstage at the summit, "Digital sovereignty is a need that the entire world feels, whether it's Sierra Leone or the US or China."

The Netherlands' decision to cancel its Microsoft 365 rollout follows a broader trend within European governments. Several countries have already started transitioning from Windows and proprietary software to Linux and open-source programs. This shift has been observed in Austria, France, Germany, Ireland, and the Swiss military.

In recent years, European governments have increasingly turned away from proprietary software solutions in favor of open-source alternatives. The Dutch tax authorities' decision is part of this larger movement towards digital sovereignty. As organizations prioritize control over their data and technology, they are opting for more secure and flexible open-source options.

The Linux Foundation's report highlights the growing importance of AI among EU organizations, with 94% citing it as a key concern alongside digital sovereignty. This trend reflects the increasing reliance on artificial intelligence in modern businesses, which is driving demand for solutions that ensure data security and control.

The Netherlands had initially planned to switch to Microsoft 365 by 2025, with a target completion date of December 2026. However, this plan was put on hold in July after the Dutch Advisory Council on ICT Assessment recommended reversing the public-cloud rollout.

About 5,000 employees had already migrated to Microsoft 365 before the decision was made to pause the rollout. The government has now announced that it will abandon its plans for a full-scale Microsoft 365 implementation and instead opt for an on-premises/open-source approach.

The Tax and Customs Administration will continue to use existing Microsoft software, at least in the short term. A phased replacement plan is being implemented, with the aim of moving certain functionalities away from Microsoft products.

The government has outlined its plans for a more sustainable and autonomous solution, with European open-source solutions set to be introduced for personal storage and collaboration in 2027 and 2028. This will allow the administration to regain control over sensitive data and communication.

The decision to abandon Microsoft 365 was driven by concerns about information security, processing, and future-proofing, as well as preserving data confidentiality and control. The ICT assessment highlighted issues with sending confidential documents through American servers rather than government networks.

The Dutch tax authorities' concerns about Microsoft 365's encryption features have been a long-standing issue for the Netherlands government.

One of the main criticisms was that end-to-end encryption would not be enabled by default for one-to-one Teams calls, which raised security concerns for sensitive communications.

This limitation also applied to group calls under the selected configuration, further underscoring the need for more robust encryption options in Microsoft 365.

In addition to encryption issues, the assessment highlighted vendor lock-in and reduced flexibility as major drawbacks of using Microsoft 365, with potential implications for digital sovereignty.

The Dutch government's concerns about American companies and their ties to the US government under current circumstances have been a recurring theme in European Union discussions on digital sovereignty.

The Dutch tax authorities have made a significant shift in their digital strategy, canceling plans to implement Microsoft 365 cloud services in favor of on-premises solutions and open-source alternatives. This move is part of a broader trend towards digital sovereignty, where governments prioritize control over their data and IT infrastructure.

Several options are being considered for the desktop suite, including NixOS, La Suite from France, and Germany's openDesk. Alternatively, the Netherlands may opt for MijnBureau, a self-hosted office suite built on top of various open-source projects such as Nextcloud, Collabora, Element, and OpenProject.

This shift towards open-source solutions is likely to have significant implications for the Dutch tax authorities' IT operations, but it also aligns with the growing trend of governments seeking greater control over their digital infrastructure.