In early April, Dame Chi Onwurah, chair of the Science Innovation and Technology Select Committee, raised concerns about the UK Government’s technology strategy, particularly its reliance on a few Big Tech providers like Microsoft and AWS. She also highlighted the issue of foreign supply chain dependencies, with Palantir’s NHS and military contracts coming under scrutiny.
While Dame Chi’s article made valid points, her definition of sovereignty as “it means exactly what you want it to mean” oversimplifies the concept. Digital sovereignty necessitates that data is subject only to the laws of its parent country or the laws accepted by the country for judicial primacy.
Sovereignty as a Crucial Issue
Dame Onwurah’s article served as a wake-up call regarding the importance of sovereignty in the digital landscape. The battle for sovereignty is already underway among Big Tech and hyperscalers, shaping the future of technology delivery in the UK, Europe, and globally.
The rise of public cloud services has intensified the digital sovereignty debate, spurred by high-profile cases like SCHREMS II, which aimed to regulate personal data transfers to countries with weaker data protection laws. Before public cloud adoption, data processing was predominantly done within the country’s borders, but cloud services have blurred these sovereign boundaries.
While sovereignty issues are often associated with hyperscalers, all non-sovereign service providers, particularly those from the US, must adapt to comply with evolving regulations.
Geopolitical Tensions and Offshoring Concerns
Geopolitical tensions and concerns over offshoring have further fueled worries about sovereignty. European countries are increasingly seeking more control over their data after years of reliance on US-based cloud providers, driven by threats and posturing from the US government.
Among the major tech players, Microsoft has faced challenges in redefining its global services for sovereign cloud delivery, with issues around transparency and data flows. AWS and Google are adapting more swiftly, with regional approaches to sovereignty.
Sovereignty Levels and Approaches
Microsoft’s strategy to redefine sovereignty within its existing product stack represents a Level 1 response, while AWS and Google have moved towards Level 2 by collaborating with local partners for sovereign operating models. Google’s partnership with Thales in France has led to the development of air-gapped sovereign cloud capabilities.
As the importance of sovereignty grows, local cloud providers may see renewed investment opportunities, but a hybrid, partnership-led approach may be the most viable solution. Government procurement practices and collaboration with tech giants will be crucial in achieving digital sovereignty across Europe and the UK.
Google’s model in France with S3NS demonstrates a potential blueprint for national cloud collaboration, emphasizing scalable national management with in-country delivery partners for a comprehensive solution.
It is imperative to initiate discussions on digital sovereignty to navigate the evolving tech landscape effectively.
