Do we still have a grip on our own data in the Netherlands?

Last week, the NOS published a study on the cloud usage of over 20,000 Dutch organizations, companies, and government bodies. It revealed that Dutch government agencies and critical businesses are outsourcing their email services on a large scale to American companies, particularly Microsoft and Google (1). Even though the mail servers are often located in the Netherlands or the EU, the American government can still gain access to the emails. State Secretary Van Huffelen has since responded to the NOS study, indicating that European alternatives to American internet services are urgently needed (2). In my view, both reports serve as an important wake-up call for our growing digital world, where we are generating ever-increasing amounts of data.

Enormous growth in the cloud market

The transition to the cloud is a reality. Gartner, for instance, has forecast that the entire cloud market will continue to rise in 2024, with IaaS expected to see growth of 26.6% (3). This growth makes sense when you consider the commercial definition of cloud: consuming IT infrastructure as a service. For companies and government bodies, this is a fantastic solution in a rapidly changing world.

‍

Unseen complexity?

Yet, there is a level of complexity in the transition to the cloud that should not be underestimated. The fact that IT is consumed as a service does not mean that the management and security of applications require no attention. In conversations with clients, I always quickly arrive at aspects of the transition that demand attention. Consider issues such as: who manages the application landscape in the chosen cloud platform? Where is the data stored? Is there an exit strategy? Are legal requirements guaranteed?

All of this makes a cloud strategy comprehensive and sometimes complex. I often wonder if this complexity is truly recognized, or if it is overshadowed by the appeal of the tech giants' clouds, leading to choices that are made too quickly and "easily" for a single provider—when, in practice, the situation almost always calls for a multi-cloud solution.

‍

The consequences

If you look at the NOS example where email is hosted in the Microsoft Cloud, the data is moved to Microsoft's platform. This means that American legislation applies to Microsoft's services. And even though the American state is an ally of the Netherlands, sovereignty over data storage is not guaranteed. The same applies to any other cloud provider not subject to European or Dutch law. Is it true that we have no other choice because there are no alternatives, as suggested in the second article?

We are lagging behind the American tech giants and lack a European cloud of the same scale. But alternatives certainly exist: there are plenty of providers in the Netherlands and Europe capable of meeting all IT requirements. The government can stimulate further development in this area, partly by investing in innovation, but also by establishing policy on cloud usage. By stating that control over data is paramount, the cloud strategy is shifted toward a data strategy where the cloud platform is a tool, not the solution.

‍

The solution: sovereign cloud

The sovereign cloud is the prime example of a cloud where data is central. The sovereign cloud offers transparency regarding data location, ensures compliance with (local) legislation, and shows who has access to the data within the platform. The result of all this is data sovereignty. This is an excellent starting point for regulating cloud usage. By incorporating the sovereign cloud as a policy for government and critical infrastructure, data sovereignty is guaranteed, while simultaneously solving another problem. By mandating the sovereign cloud as the standard, we create traction for sovereign alternatives, which will then continue to develop.

That is why now is the time to provide guidelines for the sovereign cloud, so that we can regain control over our data and the interests tied to it!

Would you like to know more about the sovereign cloud from Fundaments? Take a look here.

Sources:
1) https://nos.nl/artikel/2510923-amerikaanse-overheid-kan-bij-e-mail-van-nederlandse-overheden-en-kritieke-bedrijven
2) https://nos.nl/artikel/2511021-europese-alternatieven-voor-amerikaanse-internetdiensten-hard-nodig
3) https://www.gartner.com/en/newsroom/press-releases/11-13-2023-gartner-forecasts-worldwide-public-cloud-end-user-spending-to-reach-679-billion-in-20240

‍