Skip to content

techUK Report: Protecting Sovereignty Through Partnership

10 November 20265 min read
Reports
techUK report: The EU’s tech sovereignty push risks treating nationality as a stand-in for trust.

Geopolitical tension and fragile supply chains have made sovereignty a priority on both sides of the Channel. But the EU’s Technological Sovereignty Package, and its Cloud and AI Development Act (CADA) in particular, risks mistaking a company’s nationality for its trustworthiness. techUK’s new report, built on original economic modelling, sets out what that approach could cost the UK, and why it would leave Europe less secure and less competitive. 

Download the report here

The report argues that sovereignty and openness are not opposites. The UK and EU are not dependent on each other in ways that create risk. They are interdependent, and both are stronger when they build sovereign capabilities together. 

The report at a glance:  

  • The UK exported £412.8bn of digitally delivered services in 2025, an estimated 36% of it to the EU. 

  • Under CADA’s four-tier sovereignty framework, the highest tiers require providers to be owned and controlled from the EU. If the UK is excluded, techUK’s modelling estimates a loss to the UK economy of between £30bn and £53bn over five years. 

  • Even if the UK is recognised as a trusted partner, diverted data centre investment alone could cost an estimated £15.9bn over five years. 

  • The EU should designate the UK as a trusted third-country provider, and move from nationality-based criteria to technical security assurances. 

Sovereignty cannot be built alone. Technology value chains, from semiconductors to AI, are too complex and dispersed for any single country or bloc to control. Europe is still dependent on foreign countries for much of its digital infrastructure. The report argues that reducing those dependencies is legitimate and urgent, but that doing so through restrictions on trusted partners will not achieve it.