Why Sovereign Data Matters

In 2025, the United States sanctioned the International Criminal Court for issuing arrest warrants against the Israeli Prime Minister and Defence Minister over the genocide in Gaza.

The court’s chief prosecutor, a British citizen working in the Netherlands, had his email cancelled by Microsoft. His bank accounts were frozen.

A French judge was sanctioned by a foreign government for performing his judicial duties at an institution his own country built and funds.

An Italian lawyer, appointed by the United Nations, could not open a bank account in her own country because Italian banks feared American secondary sanctions would cut them off from dollar clearing.

The sanctions were enforced through infrastructure.

The infrastructure complied with the sanctions because they came from American jurisdiction.

European medical records, election systems, police databases, and financial infrastructure run on American systems.

The country operating those systems has surveilled our leaders, intercepted our defence contracts, tapped our submarine cables, and built industrial-scale surveillance into the platforms our citizens use daily.

Not your infrastructure, not your data.

This is the infrastructure our compliance frameworks call adequate.

No jurisdiction has more law on the books, and less infrastructure to enforce it.

Germany’s Chancellor Friedrich Merz, speaking at the Munich Security Conference in February 2026, was blunt:

“Nobody forced us into the excessive dependency on the United States in which we recently found ourselves. This lack of autonomy was self-inflicted.”

The Trump administration has dropped the pretence of partnership. The dependency the pretence concealed remains in every layer of European infrastructure.

The European model was built after catastrophe by people who understood what unchecked power does. Every pillar of it requires infrastructure Europe does not control.

That dependency was built deliberately, through law, through institutions, and through a pipeline that converts state funding into commercial dominance Europe never replicated.

American law reaches us through two routes. CLOUD Act and FISA 702 reach our data. ITAR and Buy American block the procurement that would let us escape.

The web was invented at CERN, Linux in Helsinki, ARM in Cambridge. The platforms that captured the value were American. We now pay the CIA’s most successful investment, Palantir, to police our own citizens.

Together these lock Europe into the architecture of dependency.

The pipeline that converts state funding into commercial dominance runs in one direction now and can be made to run the other way. These papers trace how the dependency was built, where it is enforced, and what it would take to replace it.

Dependent allies are weak allies.

Our hospitals, our schools, our voter rolls and our payment rails run on American clouds. None of it is ours to switch off.

I grew up in Ireland, one of the many European countries that achieved sovereignty within living memory.

Sovereignty determines whether our institutions serve us or someone else.

The European project was built to move beyond empire. The task now is to build sovereign digital capability without becoming one.