TEST environment · synthetic content · not indexed

TEST publication. This explainer is published on the TEST site for acceptance. It has not been approved for production.

Technology / Trend

Data Sovereignty and Portability

Data sovereignty and portability is the ability to decide where data and workloads are held, and to move them between providers, without commercial or technical obstacles deciding for you.

What it is
The ability to decide where data and workloads are held, and to move them between providers, without commercial or technical obstacles deciding for you.
Why it matters
A platform choice settles where data sits and how hard it is to leave, and EU rules on switching providers now apply.
Who should pay attention
Chief data officers, enterprise and platform architects, procurement leads, and risk and compliance teams.
Primary topic Data Governance Explore topic →

What it is

Sovereignty concerns where data sits and under whose rules. Portability concerns whether it, and the workloads around it, can be moved. They are treated together because a platform choice settles both at once.

UK government guidance treats portability as a managed trade-off: organisations must aim to maximise both value and portability, and may accept lower portability for good value. Where portability is very low, they should consider how and when they would change provider.

Why it matters

The EU Data Act has applied since 12 September 2025 and sets rules for switching between data-processing providers. UK government guidance updated in September 2026 treats cloud portability as a managed trade-off.

The European Commission describes the Act as setting new rules for customers to switch effectively between providers of data-processing services. DII read the Commission summary, not the Regulation, and states nothing about switching charges.

The problem it addresses

DII editorial view

Lock-in is usually accepted by accident. A platform is chosen for its value today, and the cost of leaving is found only at renewal or when rules change. Treating portability as a recorded trade-off makes the choice deliberate and gives the organisation a position to negotiate from.

Business and organisational relevance

DII editorial view

This is a procurement and risk question as much as a technical one. The decision is taken when a platform is chosen or renewed, by people who may not see the exit cost until later.

Practical use cases

  • Recording the portability of each major data platform
  • An exit route for platforms where portability is low
  • Reviewing contracts with EU providers against the switching rules

Benefits and opportunities

  • An informed trade between value and lock-in, made on purpose
  • Negotiating strength at renewal

Risks, limitations and dependencies

  • Pursuing maximum portability at the cost of value the platform would have given
  • Assuming data can be moved when the workloads around it cannot
  • Treating a summary of the rules as the rules; the Regulation itself should be read for any contractual decision

Prerequisites for adoption

DII editorial view

  • An inventory of the major data platforms and the workloads that depend on them
  • Involvement of procurement and legal, not only engineering
  • A realistic view of what moving a workload would take, beyond moving the data

Implementation considerations

  • Record portability deliberately. For each major data platform, record how portable it is and why that level was accepted.
  • Plan the exit where it is low. Where portability is very low, decide how and when you would change provider.
  • Read the rules before renewal. Review contracts with EU providers against the switching rules.

The DII Radar assessment

Approved DII Radar assessment

DII assesses Data Sovereignty and Portability as High relevance, with direction Rising. Its strategic impact is assessed as High and its enterprise adoption as Emerging. It is one of the ten entries on the current Radar.

DII relevance is our assessment of current significance and momentum, based on evidence, market development and adoption. Direction is the observed trajectory of relevance and adoption. Strategic impact is the potential or current significance to enterprise data capability, and enterprise adoption is the extent of current real-world enterprise adoption; together they set the position on the Radar. The Radar is not a prediction, vendor comparison or performance ranking.

Evidence basis: European Commission Data Act policy page (updated 2 July 2026); UK Government guidance "Managing technical lock-in in the cloud" (updated 3 September 2026).

See Data Sovereignty and Portability on the Radar →

What to consider next

DII editorial view

  • Record how portable each major data platform is, and why that level was accepted
  • Plan an exit route for platforms where portability is low
  • Review contracts with EU providers against the switching rules, reading the Regulation itself

Evidence and references

The sources DII read for this explainer. Each entry gives what the record holds; nothing is added.

  1. Data Act (Shaping Europe's digital future policy page) European Commission Published: Page last updated 2026-07-02 Read by DII: October 10, 2026 Official summary page, not the text of the Regulation. View source for reference 1 (external site)
  2. Managing technical lock-in in the cloud Central Digital and Data Office (UK Government) Published: Updated 2026-09-03 Read by DII: October 9, 2026 View source for reference 2 (external site)

Last reviewed: October 10, 2026  ·  Next review proposed for 10 January 2027.

Related articles

Published DII analysis on this subject.

Relevant resources

Templates and tools from the DII Resource Library.

Other entries in the DII catalogue.

← Return to the Radar