The governance of data and its efficient and secure management are the basis of Luxembourg’s national data strategy. “A strategy whose objective is to accelerate digital sovereignty, guaranteeing the confidentiality and security of citizens’ data,” said the minister for digitalisation, Stéphanie Obertin (DP), at the opening of the second day of Nexus Luxembourg 2025. But how can we define digital sovereignty?

For Paul Konsbruck, CEO of Luxconnect, “sovereignty is not defined as absolute control, but as the ability to make deliberate choices.” Choices that come into play when data needs to be shared. Who will hold the key to access it? Where will it be stored and processed? Who will have access, and under what conditions? These are all questions that can lead to a loss of control. For Konsbruck, this is not in itself a bad thing, but one that requires a relationship of trust and appropriate regulatory frameworks--the existence of which, he acknowledges, may frustrate some.

“By sharing, you accept a certain level of risk. That’s how the system works and honestly, I think the digital world offers much more reliable frameworks than the analogue world. When we send encrypted emails or use secure platforms, we often operate in more secure environments than when we rely on paper, postal services or face-to-face interactions. I’m not naive. Of course there are risks--real and serious risks--but they are not new. In cybersecurity and even cyber defence, the threat is not necessarily greater. It’s just different.”

The illusion of European autonomy

This threat is linked to what Konsbruck calls “digital dependency.” Whilst he points out that dependency is not a new phenomenon and is certainly not specific to technology, it is digital dependency that forces people to share data. “It is an illusion to think that Europe will become digitally autonomous in the very near future,” he insists. “The world has changed, alliances have evolved and interdependence has grown. But rather than sinking into paralysis or fear, we must address this reality with clarity and determination. If sovereignty no longer means doing everything alone, then perhaps we need to redefine it not as, but as the ability to make our own choices, choices that are deliberate, choices that are transparent and based on values we believe in.”

“True sovereignty in the digital age is not just about infrastructure or the physical location of a server. It’s about having the right frameworks, the right partnerships and the right levels of control where it counts. It’s about being able to say yes and also no from a position of strength, and to do that we need three things. First, competence, trust and coherence at European level,” he sums up.

A sovereignty of responsibility

Konsbruck argues for the creation of digital spaces that are not only effective, but also ethical. “Let’s make sure that our technological progress is aligned with our democratic values, human dignity and social justice. Let’s make sure that when we talk about data sovereignty, we mean something more than a political slogan. We mean practical and achievable commitments. This will require investment, political will and friction with our partners. This is the price we will pay for a European model of the digital world that will strike a balance between openness and protection, innovation and regulation, and ambition and responsibility.” In short: a “sovereignty of responsibility.”

This article was originally published in French.