TL;DR
The Open Rights Group says Britain is overly dependent on US technology providers for critical digital infrastructure and is urging lawmakers to act as the Cybersecurity and Resilience Bill reaches parliament. The group cites incidents where control over platforms was used as geopolitical leverage and recommends more open source and interoperable systems to reduce vendor lock-in.
What happened
Digital rights group Open Rights Group (ORG) has warned that the UK relies too heavily on US technology firms — naming Amazon, Google, Microsoft and Palantir — to provide cloud hosting and run sensitive public sector systems. ORG framed the Cybersecurity and Resilience Bill, due for a second reading in the House of Commons on 6 January 2026, as a chance to force a strategic reassessment. In briefing material and public comments, ORG highlighted cases where control of digital infrastructure intersected with geopolitics: reports that the International Criminal Court lost access to a prosecutor’s email amid US sanctions disputes (Microsoft denied cutting access, and the ICC later migrated away from Microsoft services in October 2025), the remote disabling of John Deere tractors in 2022, and the UK’s experience removing Huawei equipment under external pressure. ORG proposes greater use of open source and interoperable systems to limit vendor lock-in and expand competition for public contracts.
Why it matters
- Reliance on a small set of foreign providers can expose UK public systems to foreign laws and political pressure.
- Vendor lock-in makes it difficult and slow to replace suppliers if relationships sour or access is restricted.
- Concentration of infrastructure with hyperscalers can reduce competition for public contracts and limit UK suppliers’ opportunities.
- Technical security assurances may not protect services from geopolitical decisions or extraterritorial laws.
Key facts
- Open Rights Group says the UK depends heavily on US firms for cloud hosting and sensitive public sector systems.
- ORG named Amazon, Google, Microsoft and Palantir as examples of companies running core UK infrastructure.
- The Cybersecurity and Resilience Bill was scheduled for a second reading in the House of Commons on 6 January 2026.
- ORG highlighted reports that a prosecutor’s email at the International Criminal Court was blocked amid US sanctions; Microsoft denied cutting access.
- The ICC moved away from Microsoft services in October 2025, adopting openDesk, an open source European platform.
- ORG cited the 2022 remote disabling of John Deere tractors seized in Ukraine as an example of how control can be used remotely.
- The UK’s removal of Huawei gear from networks was presented as an instance where strategic dependencies became liabilities.
- ORG advocates for more open source software and interoperable systems to reduce vendor lock-in and enable more UK firms to bid for public work.
What to watch next
- Whether the Cybersecurity and Resilience Bill is amended to include specific measures to limit vendor lock-in (not confirmed in the source).
- Any formal government response to ORG’s briefing and calls for increased use of open source and interoperable systems (not confirmed in the source).
- Moves by UK public bodies to rebid contracts or pilot alternative cloud and open source platforms in response to these concerns (not confirmed in the source).
Quick glossary
- Digital sovereignty: The ability of a state to control and govern its digital infrastructure, data, and services without undue external influence.
- Vendor lock-in: A situation where a customer is dependent on a single supplier’s products or services, making it costly or difficult to switch providers.
- Open source software: Software whose source code is made available for use, modification and distribution by anyone, typically under a public licence.
- Interoperability: The ability of different systems, platforms or applications to work together and exchange information effectively.
Reader FAQ
Who is the Open Rights Group?
A digital rights organisation that advocates on technology and privacy issues; the article refers to it as a digital rights outfit.
What is the Cybersecurity and Resilience Bill?
Not confirmed in the source.
What examples did ORG give of geopolitical risks to digital infrastructure?
The briefing cited reports of the ICC losing access to a prosecutor’s email amid US sanctions, the 2022 remote disabling of John Deere tractors in Ukraine, and the UK’s removal of Huawei kit.
Does ORG want the UK to switch entirely to open source?
ORG recommends leaning more on open source and interoperable systems to reduce vendor lock-in, but a full switch is not detailed in the source.
PAAS + IAAS UK urged to unplug from US tech giants as digital sovereignty fears grow Digital rights campaigners say Britain’s dependence on Big Tech leaves critical systems exposed to…
Sources
- UK urged to unplug from US tech giants as digital sovereignty fears grow
- UK urged to cut out US Big Tech for sake of digi sovereignty
- UK campaigner targeted by Trump accuses tech giants of ' …
- British campaigner says tech firms behind bid to deport him …
Related posts
- Margaret Atwood on doomscrolling, Elon Musk and political resistance
- How swapping my morning scroll for Google Gemini changed my routine
- No, Microsoft did not rename Office to Microsoft 365 Copilot — here’s why