The Dutch Railways (NS) will outsource the automation of financial planning and train maintenance, among other things, to the American supplier DXC Technology.
Since January 1, 2026, ministries and other government organizations have been required to take measures to protect national security and critical processes. This is laid down in the General Security Requirements for Government Contracts (ABRO).
However, NS argues that it does not fall under this law. "We do not know whether that will change in the future. In any case, NS cannot and may not invoke this during a European tendering process."
Lokke Moerel, professor of global ICT law in Tilburg, responded critically yesterday in the NRC newspaper to the transport company's decision. "NS fails to recognize that these hosting services themselves constitute critical infrastructure for the Netherlands. Digital autonomy must be the starting point. If everyone acts like NS, we will never build our own digital infrastructure."
Clickherefor the announcement from the NS.
