2025-11-05T16:29:44+01:00 https://kaerf.org/ 2025-09-25T20:58:03+02:00 https://kaerf.org//talk/2025/09/25/why-we-should-care-for-digital-sovereignty <h2 id="software-freedom-day-2025-at-hackerspace-brussels-why-we-need-digital-sovereignty-and-where-it-comes-from">Software Freedom Day 2025 at Hackerspace Brussels: Why we need Digital Sovereignty (and where it comes from)</h2> <p>The debate surrounding technological or digital sovereignty has been ongoing for a while, but recently gained traction particularly with Trump back in office. Beyond decreasing dependencies in Europe, and investing in Open Source, one fundamental goal of digital sovereignty must be to protect fundamental rights. Sebastian’s presentation will trace the debate back to the industrial espionage that was revealed in the 2013 Snowden disclosures, data protection, and other fundamental rights in the digital age.</p> <p>On Saturday, 20 September 2025, I had the opportunity of speaking at Hackerspace Brussels on the occasion of <a href="https://hsbxl.be/events/software-freedom-day/2025-09-20/">Software Freedom Day 2025</a>. Here you can find my presentation with notes. Feel free to reach out.</p> <hr /> <h3 id="watch-the-live-recording-now">Watch the live recording now!</h3> <p>(Update 2025-11-05: You can watch the <a href="https://videos.trom.tf/w/gR1aiprXvWasHtGLRfYFaj">recording on PeerTube now</a>!)</p> <iframe title="Software freedom day @ HSBXL - Why we need Digital Sovereignty and where it comes from (Sebastian Raible)" width="560" height="315" src="https://videos.trom.tf/videos/embed/gR1aiprXvWasHtGLRfYFaj" style="border: 0px;" allow="fullscreen" sandbox="allow-same-origin allow-scripts allow-popups allow-forms"></iframe> <hr /> <h3 id="why-we-need-digital-sovereignty">Why we need Digital Sovereignty</h3> <p><em>(and where it comes from)</em></p> <h4 id="sebastian-raible">Sebastian Raible</h4> <p>Sebastian is a political consultant, representing Open Source businesses and their interests towards the EU institutions. He was previously a policy advisor and assistant to two Members of the European Parliament (2015-2024).</p> <blockquote class="notice--info"> <h5 id="contact-info">contact info</h5> <ul> <li>sebastian at raible.be · <a href="https://raible.be/">raible.be</a></li> <li>Mastodon: <a href="https://eupolicy.social/@sraible">@sraible@eupolicy.social</a></li> <li>Bluesky: <a href="https://bsky.app/profile/sebastianraible.bsky.social">@sebastianraible.bsky.social</a></li> </ul> </blockquote> <blockquote class="notice--warning"> <h5 id="disclaimer">disclaimer</h5> <p><em>I am a lobbyist for <a href="https://apell.info">APELL – The European Open Source Software Business Association</a>.</em> <em>While I am here in my personal capacity, some of my views overlap with that of the business interests I represent.</em></p> </blockquote> <hr /> <h4 id="state-of-digital-sovereignty">state of digital sovereignty</h4> <blockquote class="notice--info"> <h5 id="digital-sovereignty">digital sovereignty</h5> <ul> <li>digital and technological sovereignty</li> <li>data sovereignty</li> <li>goals: agency, control, skill</li> </ul> </blockquote> <blockquote class="notice"> <h5 id="notes-digital-sovereignty-definition">Notes: digital sovereignty definition</h5> <p>I see the terms “technological sovereignty” and “digital sovereignty” used interchangeably in the Euro bubble. People<sup id="fnref:1"><a href="#fn:1" class="footnote" rel="footnote" role="doc-noteref">1</a></sup> differentiate it into smaller categories, but for the purposes of this talk, I think it makes sense to talk about</p> <ul> <li>technological sovereignty where it comes to software, hardware, services,</li> <li>data sovereignty where it comes to data, and</li> <li>operational sovereignty where it comes to capabilities and skills. The goals are mainly to gain, or sometimes regain,</li> <li>influence over the design and functioning of <code class="language-plaintext highlighter-rouge">$tech</code> (regulation (setting of rules) and oversight, but also access, documentation, skill enabling us to change the design and parameters of a <code class="language-plaintext highlighter-rouge">$tech</code>),</li> <li>control whether the rules are complied with (monitoring, testing, enforcement),</li> <li>accountability of producers,</li> <li>sustainability (ecological, but mostly economically: savings and long-term sustainability of public investments),</li> <li>competitiveness and, implied as a result: prosperity.</li> </ul> <h6 id="see-also">see also</h6> <p><a href="https://www.deloitte.com/lu/en/our-thinking/future-of-advice/achieving-digital-sovereignty.html">Achieving digital sovereignty: When every product already says “sovereign“</a> (<a href="https://web.archive.org/web/20250622152259/https://www.deloitte.com/lu/en/our-thinking/future-of-advice/achieving-digital-sovereignty.html">Archive</a>); Sean Fleming at the World Economic Forum uses digital, cyber, technological and data sovereignty more or less as synonyms: <a href="https://www.weforum.org/stories/2025/01/europe-digital-sovereignty/">What is digital sovereignty and how are countries approaching it?</a></p> </blockquote> <hr /> <p><img src="/assets/posts/2025-09-25-why-we-should-care-for-digital-sovereignty/Cheetos.jpg" alt="A plate of sandwich and Cheetos|20%" /></p> <blockquote class="notice"> <h5 id="notes-cheetos-next-to-a-sandwich-for-no-reason">Notes: Cheetos next to a sandwich (for no reason.)</h5> <p>Dependence on technology has been used as a means to put pressure on the EU in international trade negotiations. (After such pressure has historically been and continues to be used to exploit other regions of the world by Europeans and the “West”.)</p> </blockquote> <hr /> <h4 id="state-of-digital-sovereignty-1">state of digital sovereignty</h4> <blockquote class="notice--info"> <p>Quote: German EU Presidency programme (July 2020) <em>… Europe must achieve sovereignty in the digital domain in order to remain capable of action on its own also in the future.</em></p> </blockquote> <blockquote class="notice"> <p>Notes: German presidency: digital sovereignty goal, motivated in particular by dependencies that became more obvious during the pandemic, like for the production of critical medicines, hardware, software and services, etc.</p> </blockquote> <hr /> <h4 id="state-of-digital-sovereignty-2">state of digital sovereignty</h4> <p><img src="/assets/posts/2025-09-25-why-we-should-care-for-digital-sovereignty/Pasted%20image%2020250919125158.png" alt="Euronews (17/09/2024): '… Henna Virkkunen will become the Executive Vice President for Tech Sovereignty…'|450" /></p> <blockquote class="notice"> <p>Notes: In 2024, the new European Commission came into office with the vice-president Henna Virkkunen’s job title literally including “tech sovereignty”.</p> </blockquote> <hr /> <h4 id="state-of-digital-sovereignty-3">state of digital sovereignty</h4> <p><img src="/assets/posts/2025-09-25-why-we-should-care-for-digital-sovereignty/Pasted%20image%2020250919130622.png" alt="Nextcloud 'Digital Sovereignty Index'|850" /></p> <blockquote class="notice"> <p>Notes: several initiatives exist that try to map the state of digital sovereignty, showing the level of dependency on products and services</p> </blockquote> <hr /> <h4 id="state-of-digital-sovereignty-4">state of digital sovereignty</h4> <p><img src="/assets/posts/2025-09-25-why-we-should-care-for-digital-sovereignty/Pasted%20image%2020250919130940.png" alt="Jurgen Gaeremyn's European Critical Dependencies Map|750" /></p> <blockquote class="notice"> <p>Notes: Including, of course, Jurgen Gaeremyn’s European Critical Dependencies Map that points out the reliance on extra-European mail infrastructure in public authorities</p> </blockquote> <hr /> <h3 id="why-we-need-digital-sovereignty-1">Why we need Digital Sovereignty</h3> <blockquote class="notice"> <p>Notes: title of the talk!</p> </blockquote> <hr /> <h3 id="why-we-need-should-care-for-digital-sovereignty">Why we ~need~ <em>should care for</em> Digital Sovereignty</h3> <blockquote class="notice"> <p>Notes: Actually: Why should we care for digital sovereignty?</p> </blockquote> <hr /> <blockquote> <p>[!tldr] digital sovereignty archives: Snowden</p> <ul> <li>5 June 2013: first publications of NSA documents</li> <li>mass-surveillance of individuals</li> <li>industrial espionage implied</li> <li>6 October 2015: CJEU rules <em>Safe Harbour</em> EU-US data transfer framework invalid (“Schrems I”)</li> <li>14 April 2016: GDPR is adopted (entry into force 25 May 2018)</li> </ul> </blockquote> <blockquote class="notice"> <p>Notes: first publication on 5/June, attribution to Edward Snowden on 9/June</p> <ul> <li>global mass-surveillance, mostly metadata, some communication data</li> <li>July 2013: monitoring of EU Commission, network infiltrations revealed (Belgacom)</li> <li>secret cooperation between international intelligence services</li> <li>major email, cloud storage, telco operators and other services intercepted</li> <li>secret courts and limited democratic oversight (FISA) in the US</li> <li>October 2013: major heads of state targeted, Merkel famously says “spying among friends is not acceptable”, later it is revealed that her mobile phone might have been tapped since 2002</li> </ul> <h5 id="see-also-1">see also</h5> <ul> <li>Wikipedia (EN): <a href="https://en.wikipedia.org/wiki/Edward_Snowden#Surveillance_disclosures">Edward Snowden Surveillance Disclosures</a></li> <li>Wikipedia (EN): <a href="https://en.wikipedia.org/wiki/2010s_global_surveillance_disclosures">2010s global surveillance disclosures</a></li> </ul> <p>Disclaimer on Snowden who continues to live in Russia, and has called rumours of the coming attack on Ukraine as conspiracy theories before the fact. Now apparently has citizenship and I haven’t bothered to try to find out more, but he seems to be silent.</p> </blockquote> <hr /> <blockquote> <p>[!tldr] digital sovereignty archives: Schrems II</p> <ul> <li>16 July 2020: CJEU rules the <em>Privacy Shield</em> EU-US data transfer framework invalid (“Schrems II”)</li> <li>October 2022: Biden administration signs executive order to implement <em>Data Privacy Framework</em> %% as future basis for EU-US data transfers %%</li> <li>10 July 2023: Commission adopts <em>Data Privacy Framework</em> adequacy decision</li> </ul> </blockquote> <blockquote class="notice"> <p>Notes: in large part on the basis of the Snowden leaks, the CJEU comes to the conclusion that personal data transfers to the US do not provide adequate safeguards to guarantee the protection of personal data granted by the Charter of Fundamental Rights. GDPR is in part as strong as it is because of the political discussions at the time, and as a result of Snowden</p> </blockquote> <hr /> <p><img src="/assets/posts/2025-09-25-why-we-should-care-for-digital-sovereignty/Cheetos.jpg" alt="A plate of sandwich and Cheetos|20%" /></p> <blockquote class="notice"> <p>Notes: no notes.</p> </blockquote> <hr /> <h3 id="eu-competitiveness">“EU competitiveness”</h3> <p>Draghi report</p> <blockquote class="notice"> <p>Notes: sigh. <a href="https://ec.europa.eu/commission/presscorner/detail/en/ac_25_2133">Draghi report, one year ago</a></p> <p><a href="https://www.euractiv.com/news/draghi-calls-for-deep-cuts-to-privacy-rules-and-pause-on-high-risk-ai-act/">Draghi calls for “radical cuts” to the GDPR</a></p> <ul> <li>Result is reform of GDPR is no longer out of the question</li> <li>deregulation in the name of competitiveness</li> <li>Draghi likens regulations to tariffs</li> </ul> </blockquote> <hr /> <blockquote> <p>[!info] data sovereignty</p> <ul> <li>protection of trade secrets</li> <li>protection of personal data</li> </ul> </blockquote> <blockquote class="notice"> <p>Notes: digital sovereignty is not only about industry, trade, and business fundamental rights protections more important than ever</p> </blockquote> <hr /> <h3 id="digital-colony">“digital colony”</h3> <blockquote class="notice"> <p>Notes: I digress: “digital colony”</p> <ul> <li>dependencies on non-EU providers of digital products and services</li> <li>“lock-in” to incumbent providers (e.g. because of pervasiveness, incompatibility with alternatives, or lack of comparable alternatives)</li> <li>dependencies can (and previously have been) be <strong>used as means to put pressure on Europe</strong> in trade disputes and international relations</li> <li> <p>additional concerns exist regarding the confidentiality and security of data and trade secrets, with possible backdoors in hardware, software and services</p> </li> <li>some EU efforts to reduce dependencies are underway but could be more concrete, efforts to increase (or achieve) digital/technological “sovereignty”</li> <li>(sovereignty itself can be problematic as it connects well with nationalist narratives but is now widely used outside of those contexts)</li> <li> <p>some private initiatives, notably “Euro-Stack” have gained traction, strong campaign with demands to “buy European” (similarly problematic) or at least shift investments to more European products and services</p> </li> <li><strong>“digital colony” narrative claims Europe is a colony</strong> to (usually) the US</li> <li>building on a general <strong>feeling of having been left behind, exploitation, victimisation</strong> by powerful international corporations</li> </ul> </blockquote> <blockquote class="notice--danger"> <ul> <li>“digital colony” <strong>ignores historic dimension of exploitation, genocide and systemic racism</strong>, **de-values and conceals intersectional and critical</li> </ul> </blockquote> <hr /> <h3 id="digital-colonialism">digital colonialism</h3> <blockquote class="notice"> <p>Notes: digital colonialism digression (contd.)</p> <ul> <li>narrative is not only problematic, but easily deconstructed: dependencies have been created willingly, by buying products and services in a free market economy, so not useful to moderates</li> </ul> <p>See also:</p> <ul> <li>“digital colonialism” book (so far only in German, “Digitaler Kolonialismus” by Ingo Dachwitz and Sven Hilbig, <a href="https://www.chbeck.de/dachwitz-hilbig-digitaler-kolonialismus/product/37000393"><a href="https://www.chbeck.de/dachwitz-hilbig-digitaler-kolonialismus/product/37000393">https://www.chbeck.de/dachwitz-hilbig-digitaler-kolonialismus/product/37000393</a></a>)</li> <li><a href="https://en.wikipedia.org/wiki/The_New_Age_of_Empire">Kahinde Andrews: The New Age of Empire</a></li> </ul> </blockquote> <hr /> <h3 id="conclusion">conclusion</h3> <p>==TODO==</p> <blockquote class="notice"> <p>Notes:</p> <ul> <li>Open Source</li> <li>run your own platforms and services</li> <li>needs political will</li> <li>do not weaken data protection, as that would also weaken <ul> <li>our argument</li> <li>trade secret protection</li> <li>our society</li> </ul> </li> <li>more positively: tech is widely available, affordable as never before</li> <li>copyright restrictions to content becoming more obvious again as the platforms are being enshittified to make (more) profit</li> <li>open culture</li> </ul> </blockquote> <hr /> <h3 id="photo-credit">photo credit</h3> <ul> <li><a href="https://commons.wikimedia.org/w/index.php?title=File:Cheetos.jpg&amp;oldid=1051687339">Cheetos.jpg: Scott Erhardt (PD)</a></li> <li>Screenshot Euronews (17/09/2024): <a href="https://www.euronews.com/next/2024/09/17/henna-virkkunen-becomes-eu-commission-vp-for-tech-sovereignty">These Commissioners will be in charge of EU tech policy</a></li> <li>Screenshot <a href="https://dsi.nextcloud.com/">Nextcloud Digital Sovereignty Index</a></li> <li>Screenshot <a href="https://dsi.nextcloud.com/">Jurgen Gaeremyn’s Map of European Critical dependencies</a></li> </ul> <div class="footnotes" role="doc-endnotes"> <ol> <li id="fn:1"> <p>DeLoitte defines a “Sovereignty Framework” of “4+1 dimensions”: <a href="#fnref:1" class="reversefootnote" role="doc-backlink">&#8617;</a></p> </li> </ol> </div>