Europe's Digital Sovereignty Observatory

Independent monitoring of digital sovereignty, cybersecurity, cloud infrastructure, artificial intelligence and strategic technologies.

Mission

Digital Sovereignty Watch monitors Europe's technological dependence on extra-EU providers and publishes analysis, data and reports on digital sovereignty.

Latest News

Call for participants - Knowledge Community on social media, AI and youth mental health (apply by 2 December)

WHO/Europe and the Youth4Health Network is launching a Knowledge Community to explore how digital spaces, including social media and generative AI platforms, could better protect young people's mental health. We are sharing the call in case you or your networks would like to take part. Call for participants: Join the Knowledge Community on social media, AI and youth mental health The Community is open to all interested parties, especially: Knowledge communities are informal, time-bound forums that bring together multidisciplinary expertise to analyse complex issues in the WHO European Region. This one builds on WHO/Europe's work on the digital determinants of youth mental health and well-being, which identified cross-sectoral coordination, including meaningful youth engagement, as a leading barrier. Participants will start from a preferred 2035 future in which earlier recommendations have been implemented, then work backward to identify the conditions, barriers, risks and near-term actions needed to get there. The discussion runs for 8 weeks, alternating between thematic forum discussions and webinars facilitated by youth from WHO/Europe's Youth4Health network, together with WHO/Europe staff, starting the last week of January 2027. The initiative supports the Second European Programme of Work 2026-2030, the Regional digital health action plan 2023-2030, and the Strategy for child and adolescent health and well-being 2026-2030. It will also be guided by the upcoming WHO European Framework for Action on Mental Health 2027-2037 and the Roadmap for action on artificial intelligence in health 2026-2033. Complete the online expression of interest form by 2 December 2026. Knowledge community on Social Media, AI and Youth Mental Health: Call for Participants Questions before the deadline can be sent to EUDigitalHealth@who.int.

Read more

Joint statement on cyber incidents in refrigeration systems across the EU

Since 11 October 2026, several commercial refrigeration systems and similar devices have been impacted by cybersecurity incidents in a number of EU Member States. The European Commission, together with ENISA, the European Union Agency for Cybersecurity, and all relevant EU services, is closely monitoring the situation. Given the large-scale nature of these incidents, cooperation, rapid information-sharing and coordinated response at European level is essential. Following a new wave of incidents having occurred on 1-2 November, ENISA, the European Commission (DG CNECT), Europol’s European Cybercrime Centre (EC3), the Network of the EU national computer security incident response teams (EU CSIRTs Network) and the European cyber crisis liaison organisation Network (EU- CyCLONe), advise organisations to take immediate action to mitigate exposure in the affected systems. Affected EU Member States are aware of the situation and are currently investigating the incidents, while providing guidance. The EU CSIRTs Network (EU Member States-appointed CSIRTs and CERT-EU) and EU-CyCLONe (EU national authorities in charge of cyber crisis) are actively exchanging information and monitoring the situation. ENISA and all relevant EU stakeholders will continue to monitor the incidents and contribute to the overall situational awareness at Union level. The latest advisories published by CSIRTs Network members can be found on their relevant official communication channels. ENISA maintains an advisory collection under: CNW/advisories/2026/CNW-2026-05_retail-incidents.md at main · enisaeu/CNW · GitHub Organisations should be aware that as of 11 September 2026, manufacturers of hardware and software products must report severe incidents and actively exploited vulnerabilities through the Cyber Resilience Act’s Single Reporting platform, in accordance with Regulation (EU) 2024/2847 (Cyber Resilience Act). More information is available at: https://digital-strategy.ec.europa.eu/en/policies/cra-reporting and www.enisa.europa.eu/cra-srp. The main cybersecurity requirements laid down in the Cyber Resilience Act (CRA) will apply as of 11 December 2027. Manufacturers of hardware and software products (‘products with digital elements’) will be required to implement security-by-design and ensure security support during the lifecycle of such products, including the remediation of vulnerabilities without delay. In addition, entities to which the NIS2 Directive (Directive (EU) 2022/2555) applies must implement measures to manage the cybersecurity risks to their operations, and report significant incidents to their national CSIRT or authority. Furthermore, ENISA is actively contributing to strengthening cybersecurity across the EU by promoting secure-by-design and secure-by-default principles in the EU market. Among its key initiatives are the publication of the Secure by Design and Default Playbook and regular Technical Advisories on product security. ENISA also supports information sharing and cooperation as mandated by the NIS2 Directive. For press questions and interviews, please contact: press@enisa.europa.eu.

Read more

Registrations are open! High-Level Event on the Future of the European 1+ Million Genomes Initiative

Registrations have opened for the high-level event on European 1+ Million Genomes (1+MG) Initiative, which will take place on 4 December 2026 in Brussels and online. Hosted by the European Commission, the event will focus on the progress achieved so far and the future direction of the Initiative. Genomics is becoming a key enabler of preventive and precision health, with strong potential in areas such as rare diseases, cancer, cardiovascular diseases, pharmacogenomics and risk-based screening. Combined with Artificial Intelligence, it can accelerate discovery, improve diagnosis and support more personalised and predictive healthcare. The 1+MG Initiative is enabling the effective use of genomic data within a trusted European framework. This event will demonstrate the achievements of the 1+MG Initiative supported by the Digital Europe Programme and set the strategic direction for the next phase beyond 2027. It will offer an opportunity to showcase how Europe can turn advanced digital infrastructures into concrete public value in healthcare through Member States’ collaboration and deployment of the European Genomic Data Infrastructure (GDI). The event will bring together a wide range of participants, including high-level representatives from Member States, EU institutions, patient and health professional communities, academia, research organisations and industry. Further information and registration are available on the event webpage: https://digital-strategy.ec.europa.eu/en/events/1-million-genomes-initiative-high-level-event

Read more

Apply for funding before January 3rd 2027

Do you have a valuable idea in the area of digital commons and networked technology, that will contribute towards achieving a more open information society and serves as a building block for an open internet stack? What is important for us is that the technology you develop is not just technology for technology's sake, but benefits people. If you have questions about the European Dimension criterium, you can look at the dedicated European Dimension page, and the European Dimension section in the Office Hour FAQ. And lastly, do take a look at our recently updated Generative AI polcy, which describes the do's and dont's for the use of genAI in both the application process and project development. NLnet Foundation (in Dutch: Stichting NLnet) is a recognised public benefit organisation that invests its own independent funds as well as funds that it manages on behalf of other organisations — such as the European Commission —. Watch the Recording of the Webinar ability of LLM-generated code 2026-10-29 NLnet Publishes More Stringent Generative AI Policy 2026-10-20

Read more

Newsletter: Our 5-year anniversary, PHP2Shell, Sovereign Tech Resilience relaunch and more

Email on 29 October: Our 5-year anniversary, PHP2Shell, Sovereign Tech Resilience relaunch and more On 12 October, we celebrated our five-year anniversary with guests and friends from policy, open source, government, industry, civil society, and academia. The critical vulnerability PHP2Shell sent shockwaves through the internet, reminding us all how important long-term investments into open source components are for our collective security. In 2021, the German Federal Ministry for Economic Affairs and Energy (BMWi) commissioned a small team to work out, in a feasibility study, how public investment in open digital infrastructure could be designed. To celebrate all of this, more than 150 guests, policy makers, open source maintainers, representatives from government, industry, civil society, and research, came together on 12 October in Berlin. You can find it on our brand-new publications page, that collects all our publications from the last five years in one place.Visit publications page On 21 October 2026, the PHP project released fixes for two critical security vulnerabilities, collectively known as PHP2Shell. For the two existing services, technical debt management and security audits, we are increasing the number of available service providers to expand capacity and cover a wider range of programming languages and ecosystems.

Read more

Request for Bids - Plant - Design, Supply& Installation

Project: Western Balkans Trade and Transport Facilitation Project Phase 2 (TTFP) Contract title: Design, Supply and Installation of Equipment to Enhance Safety at Railway Level Crossings 1. The Montenegro has received financing from the World Bank toward the cost of the Western Balkans Trade and Transport Facilitation Project Phase 2, and intends to apply part of the proceeds toward payments under the contract for Design, Supply and Installation of Equipment to Enhance Safety at Railway Level Crossings. The Ministry of Transport now invites sealed Bids from eligible Biders for the Design, Supply and Installation of Equipment to Enhance Safety at Railway Level Crossings. The procurement process will be conducted through international competitive procurement using Request for Bids (RFB) as specified in the World Bank’s “Procurement Regulations for IPF Borrowers” Seventh Edition, September 2025 (“Procurement Regulations”), and is open to all eligible Bidders as defined in the Procurement Regulations. The outer Bid envelopes marked “ORIGINAL BID”, and the inner envelopes marked “TECHNICAL PART” will be publicly opened in the presence of the Bidders’ designated representatives and anyone who chooses to attend, at the address below on December 16, 2026, 10:05h, local time. Attention is drawn to the Procurement Regulations requiring the Borrower to disclose information on the successful bidder’s beneficial ownership, as part of the Contract Award Notice, using the Beneficial Ownership Disclosure Form as included in the bidding document.

Read more

EDPS Opinion: EU-US border information exchange – effective safeguards are essential to protect fundamental rights in practice

EDPS Opinion: EU-US border information exchange - effective safeguards are essential to protect fundamental rights in practice - IDPC IDPC Stay up to date and get the latest from the IDPC, including a . today to our here

Read more

Watch the Recording of the Webinar Copyrightability of LLM-generated code

Today we had a lively session about and free software licensing in the age of generative AI. Gabriel Ku Wei Bin, Legal Programme Manager at the Free Software Foundation Europe, shared his knowledge about legal questions arising from the use of LLMs in the creation of Free Software. Gabriel explained the foundations of to provide an understanding on how the use of generative AI can affect software development. And how that in turn may impact copyleft licensing which lies at the basis of free software. The webinar attracted many particpants who asked Gabriel interesting questions during the Q&A. 2026-10-29 - Webinar: ability of LLM-generated code by FSFE Watch the Recording of the Webinar ability of LLM-generated code 2026-10-29 NLnet Publishes More Stringent Generative AI Policy 2026-10-20 47 Open Source Projects Receive NLnet Grants to Boost Digital Autonomy 2026-10-15

Read more

Latest Reports

Why It Matters

Europe's technological independence has become a strategic priority.

Statistics

72% Cloud services hosted outside Europe Source: Gaia-X / CISPE Cloud Report 2023
70% Business email accounts using non-European providers Source: Eurostat 2023
90%+ Collaboration platforms controlled by non-European companies Source: Bitkom / NTT 2023

Newsletter