Yay for #techsovereignty

Page 132 of the Council's Digital Omnibus text inserts a GDPR article letting AI developers train on personal data as a legitimate interest. Page 31 inserts a recital saying it is not one. Same document.

https://www.yeandel.co.uk/22-q3-2026-updates/page-132-says-yes.html #TechSovereignty

Europe's biggest rewrite of data law since the GDPR was due to be agreed on Sunday. It came off the ambassadors' agenda instead, no new date, no revised text. The blockage is trade secrets, not privacy.

https://www.yeandel.co.uk/22-q3-2026-updates/off-the-agenda-no-new-date.html #TechSovereignty

The AI minister says Britain cannot leave tech firms to police their own models. The bill that would stop them hits report stage in a fortnight. All 38 amendments on the paper belong to backbenchers.

https://www.yeandel.co.uk/22-q3-2026-updates/britain-did-not-sign.html #TechSovereignty

Britain's new cyber bill runs to 226,591 characters on reporting cyber incidents. The word voluntary never appears, and nor does near miss. One peer has written the missing clause. Nobody has co-signed.

https://www.yeandel.co.uk/22-q3-2026-updates/near-miss-no-one-reports.html #TechSovereignty

The Met's blocked two-year Palantir contract is in court. Its one published Palantir purchase, a three-month trial at 489,999 pounds, has just ended a police career. That contract expired on 30 April.

https://www.yeandel.co.uk/22-q3-2026-updates/the-trial-that-ended-in-april.html #TechSovereignty

The GDPR and UK GDPR still carry identical breach clauses. Brussels is moving to 96 hours, and only for high risk. A Lords bill writes 24 hours into UK law. Opposite directions, same month.

https://www.yeandel.co.uk/22-q3-2026-updates/ninety-six-hours-and-twenty-four.html #TechSovereignty

Buried in the Digital Omnibus: an adequacy regime for data with no names in it. The Commission could rule a country protects trade secrets "essentially equivalent" to EU law. That killed Privacy Shield.

https://www.yeandel.co.uk/22-q3-2026-updates/adequacy-for-machine-data.html #TechSovereignty

Europe promised one portal for every cyber incident report. The Council text leaves a website legally barred from receiving one, plus 27 national portals that need only "endeavour" to work together.

https://www.yeandel.co.uk/22-q3-2026-updates/twenty-seven-front-doors.html #TechSovereignty

Spain wants its data centre sovereignty rules in law before the 29 November election. The urgent route means no vote in the Cortes: two sign-offs, and the regulator has reportedly given one.

https://www.yeandel.co.uk/22-q3-2026-updates/spain-decree-two-signatures.html
#TechSovereignty

Holyrood consented to the Cyber Security and Resilience Bill on 7 October. Four times, the memorandum behind that vote says Scotland has no legal right to be asked about the powers it approved.

https://www.yeandel.co.uk/22-q3-2026-updates/holyrood-consent-on-assurances.html
#TechSovereignty

Britain's AI Security Institute tests frontier models by invitation, and in September it stopped being invited. A new Lords clause would make its audit a condition of use in essential services.

https://www.yeandel.co.uk/22-q3-2026-updates/aisi-statutory-veto.html
#TechSovereignty

Ministers would not promise Britain a digital sovereignty strategy. A peer has now tabled one as a clause, with a dashboard and the NHS, BBC and Met Office named as sovereign data assets.

https://www.yeandel.co.uk/22-q3-2026-updates/lords-digital-sovereignty-dashboard.html
#TechSovereignty

Europe's cloud sovereignty law will be drafted jointly by a Spanish conservative and a Dutch Green. Two committees hold the pen, and the Budgets committee passed on giving an opinion.

https://www.yeandel.co.uk/22-q3-2026-updates/cada-two-rapporteurs.html #TechSovereignty

Europe's new right to refuse industrial data reaches companies inside Europe. The test is who controls them, and the Commission has been handed the job of working that out.

https://www.yeandel.co.uk/22-q3-2026-updates/omnibus-ownership-test.html #TechSovereignty

Canada wants associated country status under the EU Cloud and AI Development Act. Everyone says that door has three conditions. The text sets out six.

https://www.yeandel.co.uk/22-q3-2026-updates/cada-door-six-conditions.html #TechSovereignty

The EU's latest Digital Omnibus compromise reportedly lets a firm refuse a data request when the requester sits under third country law with insufficient protection. Adequacy, for industrial data.

https://www.yeandel.co.uk/22-q3-2026-updates/omnibus-cut-builds-a-border.html #TechSovereignty

UK ministers tabled a power to order a named supplier out of critical infrastructure. The committee record: 5 agreed, 1 withdrawn, 63 not moved. Not in the bill, and not on the report stage list.

https://www.yeandel.co.uk/22-q3-2026-updates/eviction-power-nobody-moved.html #TechSovereignty

Never moved in committee in September. Back for a vote on 26 October, word for word: a power to order UK data centres and large AI systems shut down. Three cross references point at the wrong subsection.

https://www.yeandel.co.uk/22-q3-2026-updates/off-switch-back-unchanged.html #TechSovereignty

The government says British founded firms have won five billion pounds more in public contracts since March. The published evidence is three named awards and a schools pilot.

https://www.yeandel.co.uk/22-q3-2026-updates/five-billion-three-examples.html #TechSovereignty