Spain wants its data centre sovereignty rules in law before the 29 November election. The urgent route means no vote in the Cortes: two sign-offs, and the regulator has reportedly given one.

https://www.yeandel.co.uk/22-q3-2026-updates/spain-decree-two-signatures.html
#TechSovereignty

Holyrood consented to the Cyber Security and Resilience Bill on 7 October. Four times, the memorandum behind that vote says Scotland has no legal right to be asked about the powers it approved.

https://www.yeandel.co.uk/22-q3-2026-updates/holyrood-consent-on-assurances.html
#TechSovereignty

Britain's AI Security Institute tests frontier models by invitation, and in September it stopped being invited. A new Lords clause would make its audit a condition of use in essential services.

https://www.yeandel.co.uk/22-q3-2026-updates/aisi-statutory-veto.html
#TechSovereignty

Ministers would not promise Britain a digital sovereignty strategy. A peer has now tabled one as a clause, with a dashboard and the NHS, BBC and Met Office named as sovereign data assets.

https://www.yeandel.co.uk/22-q3-2026-updates/lords-digital-sovereignty-dashboard.html
#TechSovereignty

Europe's cloud sovereignty law will be drafted jointly by a Spanish conservative and a Dutch Green. Two committees hold the pen, and the Budgets committee passed on giving an opinion.

https://www.yeandel.co.uk/22-q3-2026-updates/cada-two-rapporteurs.html #TechSovereignty

Europe's new right to refuse industrial data reaches companies inside Europe. The test is who controls them, and the Commission has been handed the job of working that out.

https://www.yeandel.co.uk/22-q3-2026-updates/omnibus-ownership-test.html #TechSovereignty

Canada wants associated country status under the EU Cloud and AI Development Act. Everyone says that door has three conditions. The text sets out six.

https://www.yeandel.co.uk/22-q3-2026-updates/cada-door-six-conditions.html #TechSovereignty

The EU's latest Digital Omnibus compromise reportedly lets a firm refuse a data request when the requester sits under third country law with insufficient protection. Adequacy, for industrial data.

https://www.yeandel.co.uk/22-q3-2026-updates/omnibus-cut-builds-a-border.html #TechSovereignty

UK ministers tabled a power to order a named supplier out of critical infrastructure. The committee record: 5 agreed, 1 withdrawn, 63 not moved. Not in the bill, and not on the report stage list.

https://www.yeandel.co.uk/22-q3-2026-updates/eviction-power-nobody-moved.html #TechSovereignty

Never moved in committee in September. Back for a vote on 26 October, word for word: a power to order UK data centres and large AI systems shut down. Three cross references point at the wrong subsection.

https://www.yeandel.co.uk/22-q3-2026-updates/off-switch-back-unchanged.html #TechSovereignty

The government says British founded firms have won five billion pounds more in public contracts since March. The published evidence is three named awards and a schools pilot.

https://www.yeandel.co.uk/22-q3-2026-updates/five-billion-three-examples.html #TechSovereignty

In July the statistics regulator asked NHS England to publish Palantir platform benefits trust by trust. It has not. The usage picture has come out by FOI instead, twice.

https://www.yeandel.co.uk/22-q3-2026-updates/fdp-trust-data-came-by-foi.html #TechSovereignty

Britain's Government Cyber Action Plan runs in phases to 2029. The department that launched it was abolished in July. The guidance page is still signed in its name.

https://www.yeandel.co.uk/22-q3-2026-updates/cyber-plan-outlived-its-department.html #TechSovereignty

Ofgem puts 73GW of Britain's grid connections queue in data centres. Peak national demand last year was 45GW. It also says it is not trying to count how much of the queue is real.

https://www.yeandel.co.uk/22-q3-2026-updates/data-centre-queue-bigger-than-peak-demand.html #TechSovereignty

A peer asked if the grid can carry Britain's data centres. The answer never says. It does let slip that ministers are busy managing speculative connection applications.

https://www.yeandel.co.uk/22-q3-2026-updates/speculative-connection-applications.html #TechSovereignty

Brazil's audit court went to the sovereign cloud contract, not the architecture. It found a clause letting data go to foreign authorities, and told Serpro to take it out.

https://www.yeandel.co.uk/22-q3-2026-updates/tcu-clause-three-two.html #TechSovereignty

Brussels will reportedly call AWS and Azure DMA gatekeepers in November. That is not a choice, it is the 12-month mark in the regulation. The date that matters is six months later.

https://www.yeandel.co.uk/22-q3-2026-updates/eu-cloud-gatekeeper-clock.html #TechSovereignty

A UK command paper sets out who gets the public supercomputers. One of its five stated principles is printed as "Inclusivity, but not equality".

https://www.yeandel.co.uk/22-q3-2026-updates/airr-inclusivity-not-equality.html #TechSovereignty

Norway gave the data centres its rivers and its grid. Its technology council counted the return: 90.6 per cent foreign-owned, half the connection queue.

https://www.yeandel.co.uk/22-q3-2026-updates/norway-ninety-per-cent-foreign-owned.html #TechSovereignty

44,000 people told the NHS to stop processing their records, under article 21 of the UK GDPR. Not a petition: it reverses the burden of proof, and NHS England must answer each one.

https://www.yeandel.co.uk/22-q3-2026-updates/nhs-fdp-article-21-objections.html #TechSovereignty