US Server Seizure in Amsterdam Triggers Dutch Data Sovereignty Alarm
Amsterdam, Sunday 18 October 2026
Dutch cloud industry groups and MPs are raising urgent concerns after Amsterdam police seized an Italian ISP’s server at Washington’s request, fearing US terror designations are bypassing domestic judicial oversight.
Cross-Border Law Enforcement Seizes Hosting Infrastructure
On Tuesday, 13 October 2026, law enforcement authorities in Amsterdam executed a physical server seizure at a facility within the Science Park in Amsterdam-Oost [1][2][3]. The action was taken at the explicit request of United States agencies, targeting hardware operated by Autistici/Inventati (A/I), a non-profit Italian internet service provider that had delivered free web hosting and encrypted email services to approximately 20,000 non-governmental organisations, activist collectives, and civil rights groups globally for roughly 25 years [1][3][6]. While the physical hardware was confiscated before the collective could permanently wipe its contents, Dutch prosecutors confirmed that the captured data has not yet been directly transferred to American intelligence or law enforcement authorities [1][3][4][7].
Financial De-risking and the Dissolution of A/I
The operational collapse of A/I began in late August 2026, when the United States government placed the Italian entity on its Specially Designated Global Terrorists list, citing alleged links to decentralised ‘Antifa’ networks [3][4][5][7]. The unilateral sanction produced immediate, systemic financial de-risking across international payment channels [1][3]. A/I was stripped of its domain name registrations, had its PayPal account abruptly revoked, and suffered a complete freezing of its primary corporate accounts at the Italian ethical banking institution Banca Etica [1][3][5].
Cross-Border Banking Exposure and Systemic Risk
Banca Etica publicly condemned the US sanctions while moving to block A/I’s funds, citing acute vulnerabilities to secondary sanctions that could endanger banking services for its broader base of 130,000 commercial and retail clients [1]. A/I’s user network of 20,000 hosted entities represented a scale equivalent to 15.385% of Banca Etica’s entire customer count [1][3]. Facing compounding legal and financial liabilities that threatened affiliated individuals, A/I formally announced its self-dissolution in early September 2026, initiating server decommissioning protocols shortly before the Amsterdam raid occurred [1][3][7].
Digital Infrastructure Sector Demands Legal Oversight
The Dutch Cloud Community (DCC), the primary industry association representing internet service and cloud infrastructure providers in the Netherlands, has voiced intense concern over the action [1][3][6]. On 16 October 2026, the DCC issued an urgent formal letter to law enforcement officials, demanding explicit answers regarding the domestic legal basis of the seizure and requesting confirmation on whether an independent Dutch judge or magistrate reviewed the extraterritorial demand prior to execution [4][5][6]. The DCC subsequently updated its official position on 16 October to clarify that the breach directly impacted a Dutch digital infrastructure provider, raising alarms over long-term enterprise trust [5].
Erosion of European Cloud Autonomy and Neutrality
Industry leaders argue that executing US enforcement orders without visible, independent judicial oversight sets a dangerous operational precedent for European digital sovereignty [4][5][6]. Digital rights group Bits of Freedom highlighted that hosting intermediaries are standardly exempt from liability regarding user-generated content, warning that complying with foreign political designations risks transforming neutral infrastructure into political targets [6][7]. Cloud operators contend that if Dutch data facilities execute foreign police orders without local judicial scrutiny, international enterprises hosting digital workloads in Benelux data hubs lose essential protections against extraterritorial political decisions [1][4][5][6].
Parliamentary Friction Over Extraterritorial Treaties
In response to the sector’s uproar, Amsterdam’s Public Prosecutor’s Office (OM) stated that the physical intervention was conducted under bilateral Mutual Legal Assistance Treaties (MLAT) binding the Netherlands and the US [1][3][4]. The OM maintained that international obligations provided no valid grounds for refusal under current Dutch statutory criteria [1][3][4][7]. However, the secret nature of the request and the absence of a public judicial ruling have drawn severe political pushback from members of the Dutch parliament [6][7].
Legislative Oversight and Pending Ministerial Response
On 16 October 2026, Members of Parliament from PRO, D66, the Party for the Animals (PvdD), and the Socialist Party (SP) submitted formal parliamentary inquiries to Minister of Justice and Security David van Weel [6]. Lawmakers Kathmann, El Boujdaini, Teunissen, and Dobbe demanded full disclosure on whether human rights standards were assessed prior to compliance, and requested mechanisms to halt any impending transfer of server data copies to Washington [6]. Minister van Weel is subject to a statutory deadline to formally clarify the government’s legal position to parliament by 3 November 2026 [6].