How dependent should Swedish public authorities be on foreign cloud-based IT services? The issue serves as a backdrop to the Sustainable Digitalisation conference, hosted by the University of Skövde on 14 August.
In Denmark, the dependence of public authorities on foreign cloud services is being debated at the highest political level. The Norwegian Data Protection Authority has stated that organisations should prepare for a situation where it is no longer possible to use foreign cloud services. Meanwhile, Swedish public authorities are drawing completely different conclusions regarding the legal appropriateness of using certain cloud services.
Major uncertainties
“It is not surprising that authorities act differently. My colleagues and I have been researching cloud services for more than 15 years. We often conclude that there are major uncertainties about what actually happens to the data processed in tech companies' cloud services,” explains Björn Lundell, Professor of Computer Science at the University of Skövde.
Björn Lundell points out that a fundamental problem with many of the dominant cloud services is the lack of transparency. This means that users simply do not know where and how their data is being handled.
“A study by the European Data Protection Board, for example, shows that it is not possible to find out which subcontractors the three largest tech companies use for their services. As a result, you cannot know which law applies to the location where your data ends up,” explains Björn Lundell.
A new dimension
In 2025, the US increased pressure on Europe in matters of tariffs and trade balance. This has made the issue of cloud services highly topical. In an increasing number of European countries, including Denmark, influential decision-makers have begun to see the dependence on the dominant tech companies’ cloud services as a growing problem.
“A new dimension has entered the discussion, which concerns how countries can exploit our dependence on foreign cloud services as leverage in, for example, trade conflicts. That dimension was scarcely discussed a year ago,” says Björn Lundell.
Professor of Computer Science at the University of Skövde.
Shape the conference
When the University of Skövde hosts the online conference Sustainable Digitalisation, the issue of cloud services will serve as a backdrop to the entire event. At the conference, Björn Lundell will speak about the risks that a public authority exposes itself to when cloud services are procured and used under unknown conditions within the authority's operations.
“I am also looking forward to hearing and discussing the thoughts presented by Cristina Caffarra. She is an internationally renowned economist who has long been a strong voice in competition issues and digital sovereignty,” says Björn Lundell.
The Sustainable Digitalisation conference will take place online on 14 August. It is aimed at everyone working with IT solutions, particularly in the public sector.
About cloud services
Cloud services are IT services provided over a computer network, often the Internet. Through “the cloud”, users can access software such as word processing and spreadsheets. The cloud also provides access to server applications and data storage services.
Further reading
- Danish Broadcasting Corporation’s reporting on cloud services in Denmark
- Norwegian Data Protection Authority's recommendations
- Swedish Radio’s reporting on cloud services as and trade.
- European Data Protection Board: Coordinated Enforcement Action, use of cloud-based services by the public sector
- About Christina Caffarra
