…
While Brussels champions policy initiatives and American tech giants market their own ‘sovereign’ solutions, a handful of public authorities in Austria, Germany, and France, alongside the International Criminal Court in The Hague, are taking concrete steps to regain control over their IT.
These cases provide a potential blueprint for a continent grappling with its technological autonomy, while simultaneously revealing the deep-seated legal and commercial challenges that make true independence so difficult to achieve.
The core of the problem lies in a direct and irreconcilable legal conflict. The US CLOUD Act of 2018 allows American authorities to compel US-based technology companies to provide requested data, regardless of where that data is stored globally. This places European organizations in a precarious position, as it directly clashes with Europe’s own stringent privacy regulation, the General Data Protection Regulation (GDPR).
…
Sweden is not. Our tax office decided only this year to migrate everything to the Office 365 cloud despite Microsoft admitting that they’d turn over any data to the US government should they be asked to. I think the EU should step in on this.
Finland moved election vote count system to Amazon’s cloud service. Votes are still given on paper, but the results are counted on AWS’ servers, which theoretically gives Amazon the possibility to affect our election results from here on out.
That’s crazy, I hope electronic voting is never allowed in Portuguese elections.
That is fucking insane.
In Ireland in 2002 they tried to bring in electronic voting. It cause uproar, they had already paid for the machines so for almost a decade the machines stayed in storage in ‘accomplices’ - storage facilities among other friends locations.
The machines cost €55m (to buy and store)
Storing the machines cost as much as €700,000 one year
Dropping slightly a few years later
Election Officials to get €400,000 from state for storing them
The €51m machines were eventually sold for scrap for €70,000
Ireland could still be paying some costs until 2029 regardless that the machines have been scrapped
I don’t know much about Sweden, but the government released a report including options for digital collaboration platform technologies for the public sector in 2021 (available in English and Swedish, both a s pdf).
At least the Swedish National Board of Housing, Building and Planning has chosen Nextcloud in 2022.
No Swedish governement agency can freely choose a technical solution. Almost all such choises fall under a public procurement, which are heavily regulated. They can demand that the service supports certain things to exclude actors, but if too strict I think the procurement can be overturned. In some cases a US actor can just offer a low enough price and the agency more or less have to pick them.
The Dutch tax agency did the same, mostly because there are supposedly no sufficiently capable European alternatives.
(Worth specifying that it’s specifically about the Office 365 suite, and not the software for handling tax returns)
And don’t forget that the Dutch digital ID was outsourced to a Dutch company that was now bought by a US company. The Dutch way for the government to digitally identify Dutch citizens is about to be in US hands.
Afaik Solvinity, the company that takes care of he infrastructure behind DigiD and MijnOverheid, is on the verge of being bought by the US company Kyndryl. But it hasn’t been sold yet.
Hypothetically the government could still stop it on the grounds of national interest. Though you can see how well that went with Nexperia…
With the government being “demissionair” however, idk if they will.
It would certainly draw the attention of America is we did.
Ah, I wasn’t aware that it wasn’t 100% done yet. Shame that I have 0 trust that they’ll do anything about this.