Digital sovereignty in the public sector: Keeping the nation running

Digitalization has brought powerful new capabilities to the public sector, but it’s also introduced new risks.

As geopolitical instability and cyber threats grow, organizations need to regain control of the digital infrastructure, data and technologies they rely on.

Digital sovereignty allows them to keep the nation running and make their own digital decisions, with as little outside interference as possible.

Our new point of view:

• explores what digital sovereignty means for public sector organizations
• shares real-world examples from the sector
• suggests a structured approach for assessing risk and deciding how much control you need and where.

65% of public sector organizations say that achieving digital sovereignty is a strategic priority, with the sovereignty of data (77%), cybersecurity (72%), cloud (68%) and AI (61%) their biggest concerns.

Data and AI in government 2026: From AI ambition to operational maturity, Capgemini Research Institute, September 2026

There’s more to digital sovereignty than cloud

Cloud sovereignty has become a cornerstone of policy in the European Union. But it’s only one piece of the puzzle. To build an effective digital sovereignty strategy, organizations must assess risk in eight areas that underpin their digital services and operations – from AI to energy.

Our point of view suggests applying four lenses – data and AI, technology, operations, and legal and jurisdiction – to understand and mitigate the biggest risks.

Sovereignty is a spectrum

Not every digital workload requires the same level of sovereignty. Having limited control over a parking app may be an acceptable risk, for example. But lacking control over an air traffic control system could be extremely dangerous.

That’s why it’s essential to start by understanding the full picture of risk across your whole digital value chain. So you can build the right level of sovereignty at every stage.