Enhancing Control Over Tech Dependencies in the Internet Is BSI's Ambition
In a bid to secure digital sovereignty, Germany is actively focusing on cyber resilience, interoperability, and reducing technological dependencies. This strategic move is driven by a strong political will and significant funding commitments [1][3].
The Bundesamt für Sicherheit in der Informationstechnik (BSI), the central state authority for questions of IT security in Germany, plays a pivotal role in this endeavour. The BSI supports federal authorities in securing their IT systems, warns of risks, and develops security standards that are also relevant for companies [4].
Recently, the BSI has entered into a cooperation with Google, with the goal of supporting the development and provision of secure cloud solutions for authorities at the federal, state, and local levels. This agreement, signed in February, has a particular focus on ensuring data sovereignty [5].
However, the BSI President, Claudia Plattner, acknowledges that the US Cloud Act and similar laws in China grant the state many access possibilities. Yet, she emphasizes that the solution should be technological, not political [6].
Plattner also stresses the importance of control mechanisms to secure digital sovereignty, using European or German manufacturers and service providers. She warns about the potential for shutting down entire systems, such as clouds, solar panels, or electric vehicles, if control mechanisms are not in place [7].
For companies in critical infrastructures such as energy, health, telecommunications, and transport, certain BSI requirements are legally prescribed. Plattner advises companies not to input any security-relevant data and to set up a reasonable company account with adjustable privacy functions to prevent "shadow AI" from intervening too far [8].
Germany's push for digital sovereignty is evident in its initiatives. For instance, a €5.5 billion national AI strategy launched in 2025 targets industrial AI applications, such as machine vision, with the aim of making AI contribute 10% to Germany's GDP by 2030. This strategy is part of a broader High-Tech Strategy 2025 aligned with European goals for digital sovereignty in emerging technologies [2].
Plans also include building at least one European “AI gigafactory” in Germany and developing a domestic technology stack for AI and cloud computing, emphasizing innovation-friendly regulation and greater local infrastructure [3].
Modernizing procurement policies is another key initiative, with the Federal Ministry for Digitalization and Government Modernization working to create a European ecosystem of IT vendors ensuring secure, sovereign data control along the supply chain [1].
However, challenges persist, as exemplified by the Bundeswehr’s recent multi-billion-euro cloud deal with Google Cloud. This deal introduces some dependence on US technology but is structured to isolate Germany’s military cloud infrastructure physically and logically from the public internet and other Google systems, aiming to reduce one-sided dependencies through a multi-cloud approach [4].
In conclusion, Germany is balancing the need for digital sovereignty by promoting European and domestic cloud and AI infrastructure while pragmatically using foreign technology where necessary under strict conditions and in multi-cloud strategies [1][2][3][4]. The BSI, under Plattner's leadership, is taking steps to ensure cybersecurity and, by extension, the responsible use of AI, without blocking innovations but rather accompanying them [3].
References: 1. Digitalisierung.de 2. Europa.eu 3. Bundesregierung.de 4. Handelsblatt.com
- The Bundesamt für Sicherheit in der Informationstechnik (BSI) is working on a cooperation with Google to develop secure cloud solutions, focusing on data sovereignty, as part of Germany's drive towards digital sovereignty.
- In Germany's digital sovereignty strategy, the BSI President, Claudia Plattner, highlights the need for technological solutions, such as control mechanisms and domestic technology stacks for AI and cloud computing, to secure data sovereignty.
- The BSI, under Plattner's leadership, is promoting the responsible use of AI, ensuring cybersecurity, and facilitating innovations, but with a focus on reducing one-sided dependencies and promoting European and domestic cloud and AI infrastructure.
