Europe's path to digital sovereignty: Insights and strategies from the EU summit 2025

On November 18, 2025, the first EU summit on European Digital Sovereignty took place at the EUREF campus in Berlin. The summit was hosted by the German and French governments, which joined forces with other EU member states to bring together political decision-makers and representatives from business, science, and civil society. The focus was on key challenges and opportunities in securing European digital independence, expanding secure infrastructures, and promoting innovative technologies and companies. Discussions focused on the topics of smart regulation, targeted funding and provision of digital infrastructure, and strengthening cooperation:

One strategic pillar is the creation of more flexible and innovation-friendly data regulation that promotes access to data and technology development in particular. This goal is to be achieved through the EU Omnibus Regulation, which harmonizes and simplifies existing regulations such as the CSRD (Corporate Sustainability Reporting Directive), CSDDD (Corporate Sustainability Due Diligence Directive), the Data Act, and the EU Taxonomy. The simplification of reporting requirements and the relaxation of due diligence obligations are intended to ease the burden on SMEs and start-ups in particular. However, the compliance burden for large companies is also to be reduced, e.g., in the area of due diligence in the context of supply chain regulation.

The EU summit emphasized the importance of public procurement as a further lever for digital sovereignty. The EU and Germany are counting on the state, as a major purchaser of IT solutions, to specifically favor European technologies and thus strengthen “Made in Europe” solutions. This is intended not only to reduce dependence on non-European cloud providers, but also to promote innovation and the development of digital infrastructures with the highest security standards in Europe as a technology hub. At the same time, the promotion of start-ups and SMEs through targeted investments serves as an essential measure to strengthen Europe's innovative capabilities and competitiveness.

Innovation and technological development require suitable infrastructure. That is why the establishment and operation of sovereign infrastructure, particularly in the field of AI and cloud computing, is of strategic importance. As part of the InvestAI-Initiative, the EU is providing around €20 billion for the establishment of AI Giga-Factories, which are to become core infrastructure. Through the AI Giga-Factories, Europe aims to position itself as a leading AI location, strengthen its technological independence, and reduce its dependence on non-European providers. The AI Giga-Factories are intended to serve as open platforms that provide the entire European innovation ecosystem—from large companies to start-ups and research institutions—with access to first-class AI infrastructure.

Cooperation between innovative start-ups and established industrial companies has been highlighted as essential for Europe's technological and economic resilience. These collaborations enable the rapid transfer of innovations into marketable products and services, promote the scaling of start-ups, and at the same time strengthen industry through access to agile solutions and the latest technologies. Synergies between agility and industrial expertise accelerate innovation and enable more flexible, sovereign digitalization. Supported by funding programs, regulatory relief, and platforms such as the EuroStack Catalog, this cooperation is seen as a cornerstone of a sustainable European innovation economy. The EuroStack Catalog serves as a dynamic directory of sovereign European IT solutions and helps public and private buyers easily and transparently identify and use interoperable and EU-controlled technologies.

In conclusion: The topics discussed at the EU summit are not a future scenario. Rather, the strategy is already being implemented in view of the EU's current initiatives and measures. For companies, this means both a challenge and an opportunity: the regulatory framework is undergoing continuous reform, which requires proactive monitoring and adaptation of risk and compliance management systems. At the same time, new funding projects and collaborations are also creating opportunities that need to be identified and shaped at an early stage (see also our article “Public Ready: Operating Successfully in the Security Environment”).

Did you find this useful?

Thanks for your feedback

Recommendations