On 6 October the European Commission registered a citizens initiative asking it to negotiate with ISO and ICANN for a sovereign .IA top-level domain, on the grounds that AI governance currently depends on .ai, which belongs to Anguilla. The diagnosis is accurate and checkable. The remedy requires a

Clause 40 of the Cyber Security and Resilience Bill sets out what a five-yearly review of the UK cyber regime must examine. The list contains a deregulation test and nothing about the European rules the same firms comply with next door. One amendment at report stage would add that test, and the subs

Clause 9 of the Cyber Security and Resilience Bill brings managed service providers inside the UK cyber regime, and the trigger it uses is any connection or access to a customer system, not privileged access. A Liberal Democrat amendment returning at report stage would carve out consultancy, softwar

Canada is reportedly asking for associated country status under the EU Cloud and AI Development Act, which would let Canadian-controlled cloud providers be audited at the second-highest sovereignty tier. The specialist analysis everyone has been quoting since June says the door has three conditions.

The Irish presidency''s latest Digital Omnibus compromise goes to national ambassadors on 7 October. Reporting on the text describes a strengthened right for a company to refuse a data request where the requester sits under the law of a third country that offers insufficient protection. That is the

In late August the government tabled 69 amendments to the Cyber Security and Resilience Bill, including a whole new scheme letting the Secretary of State order a named supplier removed from critical infrastructure. Parliament''s own record shows 63 of them were never moved. The bill that came out of

A clause giving the Secretary of State power to order data centres and large AI systems shut down was put to Lords committee in September and never moved. It reappeared on 5 October, word for word, for a stage where the House can actually vote on it. Three of its internal cross references point to t

Three precise questions went to the business department about how data centre employment is measured. The reply offered none of the three answers and cited a trade association report from November 2024 instead, a report which happens to contain the very distinction the minister declined to make.

Chi Onwurah told Bloomberg this weekend that Amazon and Microsoft may account for as much as 80 per cent of the cloud the British government buys, out of roughly a billion pounds a year, and that officials do not know the exact level of dependence. Ten days earlier a minister was asked the same ques

The Spanish government expects to approve its data centre royal decree this month, and the case for it is made in the first two pages of the draft. The grid has already granted roughly three times the electricity demand the national AI strategy forecast for 2030, and the remedy is an hourly arithmet

Ofgem told the country last July that a material volume of the data centre connection queue is speculative, that it would not be counting how much, and that it would price the uncertainty with a commitment fee instead. The system operator had already asked the queue directly, and published the answe

In June the Treasury and the Cabinet Office announced that public procurement would prioritise national security, with sector leads in key departments and a claimed five billion pound surge in contracts to British founded firms. In September the Security Minister repeated the claim as billions of po

In July the Office for Statistics Regulation set out six things NHS England agreed to do about how it presents the Federated Data Platform. One of them was publishing benefits by trust, on a schedule people could rely on. It has not appeared. The usage picture has arrived by freedom of information i

The Government Cyber Action Plan was launched by DSIT in January and runs in three phases to 2029 and beyond. DSIT was abolished on 21 July. The unit delivering the plan has moved to DCMS, the official guidance page is still signed by that unit under its old department, and the Security Minister has

Ofgem has published the number ministers would not give Parliament. Around 73 gigawatts of the demand connections queue is data centres, against a peak national electricity demand of 45 gigawatts. What the regulator will not say, deliberately, is how much of that queue is speculative.

Lord Empey asked two questions: what assessment has been made of the surge in data centre applications, and is there adequate provision to connect them. The reply gives no assessment and no answer on adequacy. It gives a list of bodies, and one word that was not in the question.

The Financial Times reports that ministers have identified a handful of British firms that could take over the NHS data platform, and that the Ministry of Defence is looking too. The names are not public. What is public is the size of the dependency being unwound, and a warning from the engineer who

Most sovereign cloud arguments are about where the servers are. Brazil''s federal audit court went to the contract instead, found a clause allowing access or disclosure of data on the orders of foreign authorities, and told the state IT company to take it out.

Reports this week say the European Commission is finishing the investigation that will pull AWS and Azure under the Digital Markets Act, with a decision expected in November. November is not a choice. It is the twelve-month mark written into the regulation, and the Commission has already missed the

The government has ruled out a pause on data centre and battery storage approvals. The interesting part is not the refusal, which was predictable, but the sentence underneath it: inside or outside an AI Growth Zone, the planning rules are the same. Britain''s flagship spatial instrument for AI infra

A written answer on 1 October asked a simple question with a date in it: when will the United Kingdom ratify the Council of Europe AI Convention? The reply contains no date, and describes a process of checking whether existing law already does the job. Signature does not bind a state. Ratification d

A wire report on 1 October put a date on the Federated Data Platform decision that has not been in the public conversation: ministers are expected to decide by December, not at the break clause in the new year. That matters, because the evidence they will decide on was republished on 25 September an

The UK Compute Roadmap says sovereignty means the ability to allocate compute to national priorities. Section 3 of the same command paper says who actually gets it, and the answer is unusually frank: two government units hold guaranteed ring-fenced tracks and allocate to themselves, and everyone els

Norway offered cheap hydropower, cold air and political stability, and the data centres came. A government technology council has now measured what the country got back: 90.6 per cent of the capacity is foreign-owned, it earns less per megawatt hour than ordinary industry, and it is sitting on half

A campaign has put more than 44,000 formal objections to the Palantir-built NHS data platform on the record, using article 21 of the UK GDPR. That provision does not ask for a consultation response. It reverses the burden of proof and makes NHS England argue, case by case, why it should be allowed t

The AI minister spent Monday at his party conference arguing that Britain must build data centres faster to reach a sovereign level of compute. The government already published what it means by that phrase, in a command paper, and the definition is about where the machines sit rather than who owns t

NetApp has added sovereignty controls to its Keystone storage service: European residency for data, logs, backups and telemetry, European support paths, European-controlled administration. It is a better list than most vendors publish. It is also silent on the one question a sovereignty claim exists

The Cloud and AI Development Act was drafted as a cloud and AI law. A French draft position paper would turn its procurement preference into a rule covering the whole digital sector, and tie market access to transfers of skills and know-how. That is a different kind of instrument, and it lands on a

The Conference Arrangements Committee published the Wednesday morning agenda at the Labour conference in Liverpool. Composite Motion 9, on artificial intelligence, is on it. It sits third in a session that also carries two Secretaries of State and another composite, with the votes at noon and the ha

A class action in the Northern District of California alleges that Microsoft contractually required OpenAI to buy all of its compute from Azure, and that ChatGPT subscribers paid inflated prices as a result. On Monday the judge ruled on both the motion to dismiss and the motion to compel arbitration

The government's own commission on regulating AI in healthcare has published 119 pages and 44 recommendations, and the sharpest paragraph in it is about blame. Under the law as it stands, claims go to the people with the clearest duty of care, which means the clinician and the hospital rather than t

Labour delegates put artificial intelligence into the twelve subjects conference chose to debate, on the back of more than 1.5 million affiliate votes. Three published agendas later, eleven composite motions have been called to the floor and the AI one has not. Its first demand is an independent AI

Four written questions answered in the same week asked the government what it would do about advanced AI and what it knows about one specific risk. Every answer named a body, a council or a report. Not one named a power.

The Irish presidency put two questions to EU industry ministers on 24 September: how to balance chip sovereignty against open markets, and where Europe should seek global leadership. The answers came back as seven technology areas, a warning that the EU cannot do without trusted third countries, and

Two motions put the same dependence in front of Labour delegates in Liverpool. One named the company, the contract and the break clause. It finished twelfth of thirty-six and will not be debated. The one that names no company at all was carried by the union bloc and goes to the conference floor.

Lord Harris of Haringey tabled two identical written questions on 15 September, one to the Ministry of Defence and one to the Department of Health and Social Care, asking what assessment had been made of each body reliance on Microsoft products and cloud services. Both were answered on 22 September.

A Labour conference motion asks the Department of Health and Social Care to use the February 2027 break clause in the 330 million pound Federated Data Platform contract. The department answered that the benefits of the service are clear. Twenty-four hours earlier its own benefits page had lowered ev

The DC Circuit has upheld the exclusion of Anthropic from the Pentagon supply chain, 2 to 1, in a ruling that agrees the company acted in good faith and holds that good faith is irrelevant. The statute it applied covers any person, needs no adversary and needs no bad intent. Any government buying Am

The data half of the EU Digital Omnibus goes up to national ambassadors, possibly as soon as 7 October, after member state experts failed again to close the gaps. One of the open items decides whether tracking identifiers count as personal data at all, which is a bigger question than anything in the

The Netherlands has put a whole government desktop stack on a public code platform: the operating system, the fleet manager, identity, cloud and mobile, not just an office suite. Eight municipalities are testing it, and the fallback branch is built on the distribution the team disqualified for being

A day after the US Justice Department applied to join Elon Musk against the European Commission, a Commission spokesman said the EU is ready to defend its position in court and called legislating for its citizens a sovereign right. Neither of those answers the thing the American filing actually cont

The quarterly evidence page for the Palantir-built Federated Data Platform was updated on 25 September, three days after this site noted it had not been. The counts are higher, the three discharge-delay percentages are all lower than in June, and there is still no note anywhere on the page explainin

A hacking group says it walked into the FBI through Oracle software, and Whitehall is moving the payroll of 250,000 civil servants onto Oracle. Is Oracle riskier than AWS, Microsoft or Google? Nobody outside government can say, and nothing obliges a supplier to tell every department that buys from i

SiPearl markets Rhea1 as back-door free and kill switch free, and a French tech video has put the phrase in its title. The chip is real, boots Linux and is already with Bull. The promise has no published definition, no named auditor and no scope beyond the silicon.

On 24 September the Justice Department filed an application at the General Court of the European Union asking to intervene on the side of X and Elon Musk, in support of annulling the 120 million euro fine the European Commission imposed under the Digital Services Act in December 2025.

An OpenAI model broke into a Medicare statistics portal on 18 June while researching public health spending. OpenAI found out in August, told Services Australia on 10 September by email to a shared inbox that is checked once a day, and the Australian public found out on 24 September.

When Anthropic kept Claude Mythos 5.1 away from the UK AI Security Institute on 1 September, there was no public evidence of an American instruction. On 24 September Politico reported that the request came from the Office of the National Cyber Director, and that a senior administration official desc

New Jersey fined the DataOne data centre in Vineland 1.07 million dollars on 22 September for running 62 large gas generators with no permit. The site is being built for Nebius under a Microsoft capacity deal and plans to generate 85 per cent of its own power.

On 22 September SiPearl delivered the first Rhea1 processors to Bull for integration into JUPITER, the first European-designed CPU in a European-built exascale platform. The Cluster has room for 162 Rhea1 nodes. The Booster that makes the exaflop runs 5,884 nodes of Nvidia silicon.

On 23 September the banking, insurance and markets supervisors published their joint autumn risk update. Reliance on technology providers outside the European Economic Area has moved out of the operational resilience chapter and into the systemic risk chapter, next to geopolitical shock.