What it is
Sovereignty concerns where data sits and under whose rules. Portability concerns whether it, and the workloads around it, can be moved. They are treated together because a platform choice settles both at once.
UK government guidance treats portability as a managed trade-off: organisations must aim to maximise both value and portability, and may accept lower portability for good value. Where portability is very low, they should consider how and when they would change provider.
Why it matters
The EU Data Act has applied since 12 September 2025 and sets rules for switching between data-processing providers. UK government guidance updated in September 2026 treats cloud portability as a managed trade-off.
The European Commission describes the Act as setting new rules for customers to switch effectively between providers of data-processing services. DII read the Commission summary, not the Regulation, and states nothing about switching charges.
The problem it addresses
DII editorial view
Lock-in is usually accepted by accident. A platform is chosen for its value today, and the cost of leaving is found only at renewal or when rules change. Treating portability as a recorded trade-off makes the choice deliberate and gives the organisation a position to negotiate from.
Business and organisational relevance
DII editorial view
This is a procurement and risk question as much as a technical one. The decision is taken when a platform is chosen or renewed, by people who may not see the exit cost until later.
Practical use cases
- Recording the portability of each major data platform
- An exit route for platforms where portability is low
- Reviewing contracts with EU providers against the switching rules
Benefits and opportunities
- An informed trade between value and lock-in, made on purpose
- Negotiating strength at renewal
Risks, limitations and dependencies
- Pursuing maximum portability at the cost of value the platform would have given
- Assuming data can be moved when the workloads around it cannot
- Treating a summary of the rules as the rules; the Regulation itself should be read for any contractual decision
Prerequisites for adoption
DII editorial view
- An inventory of the major data platforms and the workloads that depend on them
- Involvement of procurement and legal, not only engineering
- A realistic view of what moving a workload would take, beyond moving the data
Implementation considerations
- Record portability deliberately. For each major data platform, record how portable it is and why that level was accepted.
- Plan the exit where it is low. Where portability is very low, decide how and when you would change provider.
- Read the rules before renewal. Review contracts with EU providers against the switching rules.
The DII Radar assessment
Approved DII Radar assessment
DII assesses Data Sovereignty and Portability as High relevance, with direction Rising. Its strategic impact is assessed as High and its enterprise adoption as Emerging. It is one of the ten entries on the current Radar.
DII relevance is our assessment of current significance and momentum, based on evidence, market development and adoption. Direction is the observed trajectory of relevance and adoption. Strategic impact is the potential or current significance to enterprise data capability, and enterprise adoption is the extent of current real-world enterprise adoption; together they set the position on the Radar. The Radar is not a prediction, vendor comparison or performance ranking.
Evidence basis: European Commission Data Act policy page (updated 2 July 2026); UK Government guidance "Managing technical lock-in in the cloud" (updated 3 September 2026).
See Data Sovereignty and Portability on the Radar →
What to consider next
DII editorial view
- Record how portable each major data platform is, and why that level was accepted
- Plan an exit route for platforms where portability is low
- Review contracts with EU providers against the switching rules, reading the Regulation itself
Evidence and references
The sources DII read for this explainer. Each entry gives what the record holds; nothing is added.
- Data Act (Shaping Europe's digital future policy page) Official summary page, not the text of the Regulation. View source for reference 1 (external site)
- Managing technical lock-in in the cloud View source for reference 2 (external site)
Last reviewed: October 10, 2026 · Next review proposed for 10 January 2027.
