Digital sovereignty. It's one of those phrases politicians love to throw around in Brussels, right between "green transition" and "competitive innovation ecosystem". Sounds important. Sounds urgent. Sounds like something Europe is definitely, absolutely, totally getting right.
Spoiler: we're not.
Digital sovereignty, stripped of the buzzword varnish, means one thing: Europe's ability to control its own data, infrastructure, and technology without being perpetually dependent on US and Chinese tech giants. That's it. Not complicated. But here's where it gets messy: 92% of EU data lives on US servers. Over 80% of our digital products are imports. Our cloud infrastructure is dominated by AWS, Google, and Microsoft. And our legal framework? Well, the US CLOUD Act can compel American companies to hand over European data regardless of where it's stored.
The scope of this problem is... honestly, it’s just fucking immense. It’s not just "big". It’s not "systemic". It’s the kind of scale that makes your stomach drop through the floor. You know that feeling when you're standing in the Piazza del Duomo in Milan, and you're staring up at that massive, ornate front of the cathedral, and for a split second, you imagine it just... losing its grip? Just gravity finally winning, and that entire, impossible weight of stone and history starts falling right on top of you? And you’re just standing there, this tiny, insignificant speck of carbon, watching your certain death descend with deafening silence, and the only thing your brain can manage to scream is "FUCK"?
That is the scale of what is at stake here. I don't think people actually get it. The sheer, terrifying mass of what we’ve already lost and what we’re about to lose is enough to keep you awake for a decade. Without coffee. Literally, just this alone.
We aren’t just talking about a "tech gap". We are talking about the very operating system of our entire civilization. It is everything. It is the silicon in your toaster and the silicon in the multi-billion euro defense systems that are supposed to keep us from being wiped off the map. It’s the cloud where your childhood photos live, and the cloud where your government stores the data that defines your legal existence. It’s AI, not the "funny picture" AI, but the black-box AI that will soon decide if you're a credit risk, a security threat, or a productive citizen. It’s Quantum, which sounds like sci-fi until you realize it’s the key to melting every piece of encryption that keeps our bank accounts, our power grids, and our state secrets from becoming a public playground for anyone with a sufficiently large refrigerator.
It’s all intertwined. Security. Economic relevance. The literal stability of our member states' political systems, and the cohesion of the EU as a whole. If the infrastructure isn't ours, the sovereignty is a pathetic lie. We are building our entire future on rented ground, and the landlords don't even live in our time zones. They can flip a switch, change a line of code, or update a Terms of Service agreement in the middle of the night, and Europe, the grand, old, sophisticated Europe, just... stops working.
The hopelessness of it? It’s that we’re standing there, looking at that falling cathedral, and our collective response is to form a sub-committee to discuss the sustainability of the rubble. It’s tragic. It’s terrifying. It’s so damn massive that it feels like a cosmic joke.
Failure doesn't just mean "losing a market". It means perpetual dependency, economic stagnation, the total erosion of privacy, and becoming a digital colony to whoever decides we're no longer profitable enough to support.
No pressure, though.
The gamble in a casino that pays off in vibes from fortune cookies
Europe's first major play was the EU Chips Act, rolled out in 2023 with a bold €43 billion target. The goal was simple: stop being pathetically dependent on Asia and the US for the tiny pieces of silicon that run literally everything. Build labs. Train engineers. Hit 20% of global semiconductor market share by 2030.
So how's that going?
Well, the Chips Act did catalyze somewhere between €69 billion and €100 billion in investments. That's not nothing. We've got pilot lines spinning up, competence centers opening, and a lot of very serious people in suits talking about "strategic autonomy" at conferences.
But here's the problem: that 20% target by 2030 is not happening. EU auditors have called it "aspirational", which is bureaucrat-speak for "we're not even close and we know it". The fragmentation is brutal. Every member state wants their own piece of the semiconductor pie, so instead of building a few world-class hubs, we're spreading resources thin across a dozen competing initiatives. And the bureaucracy? Chef's kiss. If you thought getting a building permit was painful, try navigating cross-border funding mechanisms for advanced chip manufacturing.
There are already calls for a Chips Act 2.0, which tells you everything you need to know about how well Chips Act 1.0 is going.
Chip Act 2.0 is the NIS/NIS2 delusion
We’ve somehow convinced ourselves that if we just type enough words into a PDF and vote on it in a grand building with nice carpets, the cold, hard reality of bits and bytes will somehow conform to our collective wishes. It’s a group hallucination. It’s like trying to stop a tidal wave by writing a strongly worded letter to the moon and hoping it reads the fine print. It reminds me of those "manifestation" videos where people chant and chant and chant, and then... nothing happens.
First, it was NIS (Network and Information Security Directive). Then, when the world didn’t magically become secure and hackers didn't politely check the Official Journal of the EU before encrypting our hospitals, we did the only thing bureaucrats know how to do: we shipped NIS2!
It’s the legislative equivalent of "turning it off and on again," except we never actually turn anything on. We just add more layers of "compliance," more forms to fill out, more checkboxes that satisfy an auditor sitting in a cubicle but don't mean a goddamn thing to a state-sponsored threat actor sitting in a basement. We treat legislation like a software patch. Version 1.0 was buggy? No worries, we’ll ship 2.0. But laws aren't code. Laws don't execute on a processor. They execute in courts, years after the damage is already done.
While Brussels is debating whether a particular clause is too "burdensome" for an SME (don't get me started on the recent omnibus to simplify GDPR, for the sake of my own mental health I will not go there), our actual critical infrastructure, our power grids, our water pumps, our healthcare systems, are getting absolutely pummeled. Daily.
What the f*** are we even doing here boys?
It’s so ridiculously pointless it makes you want to just stop, sit down on the pavement, and wait for the lights to go out. To be honest, a single snowflake falling on a German Autobahn... that tiny, frozen speck of water that lands on the asphalt and is immediately vaporized by a speeding BMW... that snowflake has a more tangible, measurable impact on the physical world than NIS2 does on the security of a legacy SCADA system running on Windows XP.
We’re fighting a digital war with ink and good intentions. Come on, man.
The Cloud Sovereignty Disaster
Then there's GAIA-X. Remember GAIA-X? The big, bold European cloud initiative that was going to create a federated, sovereign cloud ecosystem and finally free us from AWS and Azure?
Yeah, about that. GAIA-X stalled. Hard. And not just stalled; it got dominated by the very hyperscalers it was supposed to compete against! AWS, Google, and Microsoft joined GAIA-X as members (yes, really), which is like inviting the fox to help design the henhouse security system.
EuroStack
But wait! There's hope on the horizon! Enter EuroStack: an open-source, interoperable European stack for sovereign cloud and AI infrastructure. It's gaining traction. The European Parliament is supporting it. It's early-stage, sure, but at least it exists as an actual alternative rather than a vibes-based PowerPoint deck.
The problem? EuroStack is fighting an uphill battle against entrenched US dominance. AWS didn't get to where it is by accident. They've got the infrastructure, the ecosystem, the integrations, the developer mindshare. Convincing organizations to migrate to a nascent European alternative when their entire stack is built on AWS Lambda and S3 is... optimistic. I'll borrow bureaucrat-speak and call it aspirational, and leave it there.
The Draghi report
In 2024, the Draghi Report landed like a brick through a window. Mario Draghi, former ECB president and the guy who once promised to do "whatever it takes" to save the euro, took a hard look at Europe's competitiveness and delivered a diagnosis: we're lagging badly in productivity and technology because of chronic underinvestment and regulatory gaps.
My goodness me. It took Draghi to say what literally everyone already knew to make the EU take it seriously.
The report's recommendations are simple in theory, terrifying in practice: €750-800 billion per year in R&D investment. Massive innovation push. Skills overhaul to close the gap with the US and China. Response? A lot of nodding. A lot of "we agree this is important".
Allocating money to a null pointer
Also, what are you gonna do with that money? No, seriously. Stop for a second. Put down the coffee. Look me in the eye. What the fuck are you actually going to do with eight hundred billion euros a year?
A private sector company, the kind that actually has to, you know, survive, allocates resources when there is a clear, burning need. They build a feature because customers are screaming for it. They scale infrastructure because the servers are melting. They invest in R&D because if they don’t, the competition will eat their lunch.
The government? The government allocates the money first and then forms a working group to determine what to spend it on. It’s the cart-before-the-horse maneuver, "We need to invest in R&D!" Okay, great. In what? "Innovation!" Fantastic. What part of innovation? "The tech part!" Which tech part? "The one with tech in it!"
It’s embarrassing. It’s the kind of banality that makes your brain want to leak out of your ears. Point me to a piece of paper, I am begging you for a one single, solitary sheet of A4, that shows exactly where that money goes without it being a corrupt nepotism deal, or some "strategic acceleration program" where a bunch of students get five-figure grants to buy beer, get s**faced, and then produce a "research paper" that any serious senior engineer would have discarded after writing it on the back of a napkin while waiting for their morning espresso to brew.
And we’re just... allowing this? We’re nodding along as if "spending money" is the same thing as "having a strategy."
It’s not.
It’s just burning cash to stay warm while the house is on fire. It’s so mind-numbingly dumb that it feels heavy, like a physical weight on your chest. You realize that the people in charge of "saving" our digital future have the same grasp on technology as a particularly confused golden retriever, yet they are the ones signing the checks with your name on them. It’s the kind of stupidity that moves beyond tragedy and into a comedy. How the hell are we this dumb? Why are we letting this happen? It’s an insult to every person who actually builds things for a living. It’s an admission that we’ve given up on actually solving the problem and decided to just fund the bureaucracy of looking like we're trying.
The talent crisis nobody wants to talk about
Here's the thing nobody wants to say out loud: Europe is millions of workers short in tech skills, and the gap is widening.
It's not just that we need more developers. It's that the developers we're producing don't have the skills that matter. STEM graduates come out of universities without meaningful expertise in AI, cloud, modern security practices. Firms across Europe report massive gaps in programming, problem-solving, and applied skills. And it's not because students are lazy or stupid. It's because academia moves at a glacial pace and the technology industry moves at light speed.
By the time a university updates its curriculum to include, say, Kubernetes or transformer models, the industry has already moved two generations ahead. So you end up with fresh graduates who know Java and relational databases but have never touched a vector database or written a prompt for an LLM. Great for 2010. Useless for 2026.
And then there's the brain drain. Why would a talented engineer stay in Europe when they can double or triple their salary in the US, work with cutting-edge tech, and not deal with the bureaucratic molasses that defines European tech regulation? We're actively exporting the talent we do produce.
And the reskilling programs? Insufficient. Underfunded. Slow to deploy. Most of the people who need reskilling are already employed, already busy, already stretched thin.
Immigration isn't helping either. The US and China are aggressive about attracting global talent. Europe? We make it difficult, slow, and uncertain. So the best engineers from India, China, Latin America, they're not coming here. They're going to Silicon Valley or Shenzhen.
And I’m gonna stop right here, because we need to talk about the elephant in the room that’s currently stomping on our collective chest.
Europe screams for "talent." We publish reports about "closing the skills gap." We hold summits on "attracting the world's best." And then, the second someone with a different skin tone or a slightly unfamiliar accent actually shows up to do the work, the mask slips.
Look, I’m from the Balkans. I know how this cycle works. Before Indians became the current target of online vitriol, it was us, the "thieves" and "laborers" from Eastern and Southern Europe. Then it was black people. Then it was Muslims. Now it’s Indians. It’s a revolving door of hatred, and right now, the right-wing populists are having a field day beating their chests about "cultural purity" while their digital infrastructure is literally crumbling because they don’t have enough people who know how to maintain it.
Bit off topic, but kinda related, one of the funniest things was the recent security conference where Martha Root took down a white supremacist dating site, live on stage. I literally cried of laughter. I was gasping for air honking like a bullfrog.
I’m going to be very clear here: I am not a "woke" person. I don't identify as a leftist. I’m a libertarian. I believe in the free market, I believe in individual freedom, and I believe in a small government that stays out of people’s lives. But you know what I also believe? Slavery is a sin, and being a hateful, intolerant prick is disgusting.
I can agree with the right on taxes, but the second the "white pride" talk starts, brother, I'm reporting you to authorities.
It’s the sheer, mind-bending hypocrisy that gets me. We hear "immigrants are taking our jobs," but which jobs? Because from where I’m standing, a huge chunk of the "native" population is getting social science degrees and training to be glorified paper-pushers in the very bureaucracy that’s killing our innovation.
STEM is for "nerds," right? Well, those "nerds" from India, from China, from across Asia, from Latin America... They are hard-working people who actually value the labor. They navigate a Kafkaesque, painful visa situation that would make most of us quit in a week, and they come here and they succeed.
We should be begging them to stay. We should be learning from them. Instead, we have people who have never written a line of code in their lives telling Indians who are celebrating New Year to "go get a bar of soap."
How do we expect to achieve "digital sovereignty" when we are actively repelling the very human capital required to build it? You can’t build a sovereign cloud with "white pride." You can’t write a secure compiler with "xenophobia." You build it with the best minds on the planet, regardless of where they were born or what they look like.
Part of me believes we deserve the irrelevance that’s coming for us. We’re literally looking at a burning building and refusing to let the firemen in because we don’t like the color of their truck. And honestly? It’s the most "European" way to fail I can imagine.
There, I said it. I used to have liberals hate me because I didn't support programs which didn't bring any tangible benefits to the average person (but they sounded all nice and noble), now I'm gonna have right wingers mad because I point out that we're actively repelling the very human capital required to build digital sovereignty. Luckily I'm from the Balkans, and we're literally fueled by hate, so as far as I'm concerned, hate me all you want. I support programs that bring tangible benefits to the average person, and I'm anti-hate.
The pessimistic outlook (which is probably right)
Look, I'd love to sit here and tell you that Europe is going to make a miraculous comeback. That by 2030 we'll have thriving semiconductor labs, a competitive cloud ecosystem, and a pipeline of world-class AI talent. That we'll achieve true digital sovereignty and finally break free from US hyperscaler dependence.
But I'm not going to do that. Because it's not true.
Forrester predicts no meaningful shift away from US hyperscalers in 2026. That 90%+ dependency? It's sticking around. And it's not just dependency; it's sovereignty-washing. Organizations will slap "EU-compliant" labels on services that are still fundamentally running on AWS infrastructure, call it "sovereign", and move on. The appearance of control without the substance.
Geopolitical tensions aren't helping. The Trump era (yes, he's back, and yes, it's as chaotic as you remember) has introduced a new layer of unpredictability into transatlantic tech relations. Tariffs, data localization requirements, extraterritorial legal demands; all of it making it harder for European organizations to navigate what should be straightforward technology decisions. And if you disagree with the US foreign policy, you're gonna get kidnapped in your pajamas.
Europe risks what I'll call a "slow agony" of irrelevance. Not a sudden collapse. Not a dramatic failure. Just a steady, grinding decline into becoming a digital colony: a market that consumes technology but doesn't produce it, that follows rules set elsewhere, that depends on infrastructure it doesn't control. And the saddest part? We'll probably keep talking about digital sovereignty the whole way down. Committees will meet. Reports will be published. Politicians will make speeches.
And nothing will fundamentally change.
No one is coming to save you
At this point you're probably thinking: "OK Peter, thanks for the existential dread. What the hell am I supposed to do about any of this? How do we fix Europe?"
Here is the uncomfortable, gut-wrenching truth: You don't.
You don't fix a cathedral that’s already in terminal freefall. You don't "reform" a billion-euro black hole that’s fueled by its own inertia. And you certainly don’t "save" a culture that has decided that "xenophobia" is a better strategy than "meritocracy."
The leaders in Brussels had their chance. They’ve had decades. They spent them writing legislation, funding beer-soaked research papers, and hosting summits on "strategic autonomy" while their own emails were hosted on Microsoft servers. They aren't going to save us. They are the ones who let the foundation rot while they were busy arguing over the color of the drapes.
So, what can you actually do?
Stop being a digital serf. Stop trusting that the ground you’re building on is yours just because you pay a monthly subscription to a landlord in Seattle. Host your own stuff. Learn the stack, not just the labels, but the actual, gritty mechanics of it. If you’re a developer, stop being a framework-wrapper and start understanding how the bytes move. Make yourself indispensable and independent.
Stop nodding along when some politician talks about the "EU Chips Act" as if it’s a victory. It’s a joke. Call it out. Demand reality, not "vibes from fortune cookies." If we’re going to fail, let’s at least have the dignity to fail with our eyes open, not while singing hymns to a bureaucracy that doesn't know what a vector database is.
If you’re building a company, build it to be resilient. Assume the infrastructure you rely on will be weaponized against you, or simply turned off. Own your data. Own your contracts. Don't build on sand; especially not sand that belongs to someone else.
Or recognize when it’s time to leave. I’m not going to sugarcoat this, and I’m definitely not going to give you some "patriotic" speech about staying and fighting for a system that actively repels you. As a libertarian, I believe in the ultimate freedom: the freedom to move. If Europe continues its "slow agony" of irrelevance, if it continues to punish success, ignore talent, and prioritize "paper-patching" over actual engineering, then the most rational, most sovereign thing you can do is emigrate. Go to where you are valued. Go to where the building isn't on fire. Go where you can actually build rather than just manage the decline. If they ask me when's the next flight to the US, I'll still ask about importing my car, but the answer to the first question is "as soon as I can pack a bag."
The path forward isn't about "saving Europe." That ship has likely sailed, and the crew is currently busy arguing over the font size of the distress signal. The path forward is about saving yourself. It’s about building your own sovereignty in the wreckage. So yeah. Digital sovereignty. It’s a quest. But maybe the quest isn't about reaching some grand European utopia. Maybe the quest is just about making sure that when the cathedral finally hits the ground, you’re not the one standing underneath it.
No pressure. Happy 2026, or something.