Integrated guidelines for creating an autonomous, secure and globally competitive digital ecosystem
*By Darci de Borba and Luiz Felipe Vieira de Siqueira
Digital sovereignty emerges as a central concept in the Brazilian context, referring to a State's ability to exercise its authority and control in the digital environment, protect its national interests and guarantee the security of its citizens and infrastructure (Polido, 2024).
In Brazil, the topic is beginning to gain relevance, especially in light of discussions about data regulation, 5G, and cloud services. The literature also highlights the discursive and strategic dimension of digital sovereignty, not only as technical control but also as a struggle for symbolic and political power. Studies further reinforce that the debate goes beyond infrastructure, encompassing regulatory autonomy and the ability to impose norms in cyberspace.
This article proposes a set of coordinated public policies to strengthen Brazil's digital resilience, based on international best practices, relevant legislation, and contemporary debates.
- Digital Sovereignty Challenges in Brazil
Digital sovereignty can be understood as a state's ability to autonomously control its digital infrastructure, data flows, critical services, and technological decision-making processes. This concept has gained traction in the European Union with initiatives such as the Gaia-X project, which aims to reduce external dependencies and ensure European control over cloud services.
Data sovereignty and control of data infrastructures are central to strengthening cybersecurity structures. The transnational dimension of cybersecurity and the expansion of AI pose jurisdictional challenges. There are concerns about "data colonialism or neocolonialism" and transnational corporate power that could subject governments and populations to invasive technological standards that violate fundamental rights. Global interdependencies in technology supply chains make it essential to formulate public policies that reconcile digital resilience and geopolitical interests.
Brazil faces significant challenges in maintaining its digital sovereignty, but it also possesses a significant set of capabilities and accumulated experience. Building a robust national strategy, involving the state, businesses, and civil society, is essential to transforming the country into a resilient, autonomous, and globally competitive digital player. The following section brings together some policy suggestions that can strengthen Brazil's resilience.
- Public policies to strengthen resilience
Building a robust digital sovereignty agenda in Brazil requires the design of integrated public policies capable of responding to emerging challenges and anticipating future risks. A country's digital sovereignty depends not only on technological investments but also on political leadership, institutional strengthening, and local innovation. This section proposes guidelines articulated in seven dimensions, based on international best practices and adapted to the Brazilian context.
Strengthening governance and institutional coordination: The first line of action involves creating a national digital sovereignty strategy that integrates various public, private, and academic stakeholders. This strategy should articulate regulatory frameworks, action plans, and incident response protocols, ensuring clear responsibilities and lines of command in crisis situations. An inspiring model is that of the European Union, which combines regulation, multisectoral cooperation, and continuous monitoring mechanisms.
Development of sovereign technological infrastructure: Reducing external dependencies requires strengthening local technological infrastructure, including sovereign cloud, semiconductors, data centers, and critical networks. Investments in research, development, and innovation, as well as fiscal incentives and public procurement that prioritize domestic solutions, are essential to creating an autonomous and resilient digital ecosystem. This dimension also includes the adoption of open standards and open-source technologies, with due attention to the associated risks and benefits.
Strategic use of emerging technologies: AI, while posing risks, also offers significant opportunities to strengthen cyber resilience. AI can be used for early threat detection, anomalous behavior analysis, and incident response automation. Public policies should encourage the responsible use of these technologies, establishing clear ethical and governance parameters.
International cooperation and regional articulation: Finally, Brazil's digital resilience will be stronger the more anchored it is in international cooperation networks. Active participation in regional and global initiatives allows Brazil to share information, receive early warnings, and align response strategies. The country should seek a leading role in these forums, leveraging its regional leadership position.
Digital sovereignty, both a challenge and an opportunity, is now a strategic priority for Brazil. Consolidating integrated public policies that combine solid governance, investment in national infrastructure, and the ethical use of emerging technologies is essential to reducing vulnerabilities and expanding the state's ability to protect its citizens and critical assets. Strengthening technical capabilities, combined with regulatory mechanisms that balance innovation and security, could position the country more autonomously in the face of global competition for data, technology, and digital influence.
In this sense, building a resilient digital ecosystem requires political commitment, qualified international cooperation, and active engagement from the private sector and civil society. By investing in the connection between digital sovereignty and technological transformation, Brazil can not only mitigate risks associated with cyberspace but also create conditions for inclusive and sustainable economic development, guided by the defense of fundamental rights and the strengthening of its decision-making capacity in the globalized digital environment.
*Darci de Borba is a researcher at ABES Think Tank, planning and research technician at Ipea, PhD student in Administration at the University of Vale do Rio dos Sinos (UNISINOS) and Master in Administration from the Pontifical Catholic University of Rio Grande do Sul (PUCRS). The opinions expressed in this article do not necessarily reflect the positions of the Association.
*Luiz Felipe Vieira de Siqueira is a lawyer and researcher at ABES Think Tank, PhD candidate in Innovation & Technology – PPGIT UFMG and partner at Privacy Point. The opinions expressed in this article do not necessarily reflect the positions of the Association.
Notice: The opinion expressed in this article is the responsibility of its authors and not of ABES – Brazilian Association of Software Companies
Article originally published on the IT Forum website: https://itforum.com.br/colunas/soberania-digital-no-brasil/
References
Adler-Nissen, R., & Eggeling, K. A. (2024). The Discursive Struggle for Digital Sovereignty: Security, Economy, Rights and the Cloud Project Gaia-X. Journal of Common Market Studies, 62(4), 993–1011. Scopus. https://doi.org/10.1111/jcms.13594
Akcali Gur, B. (2022). Cybersecurity, European digital sovereignty and the 5G rollout crisis. Computer Law and Security Review, 46. Scopus. https://doi.org/10.1016/j.clsr.2022.105736
Blancato, F. G., & Carr, M. (2024). The trust deficit. EU bargaining for access and control over cloud infrastructures. Journal of European Public Policy. Scopus. https://doi.org/10.1080/13501763.2024.2441418
Budnitsky, S. (2022). A Relational Approach to Digital Sovereignty: E-Estonia Between Russia and the West. International Journal of Communication, 16, 1918–1939. Scopus.
Farrand, B., & Carrapico, H. (2022). Digital sovereignty and taking back control: From regulatory capitalism to regulatory mercantilism in EU cybersecurity. European Security, 31(3), 435–453. Scopus. https://doi.org/10.1080/09662839.2022.2102896
Gatica, J. P. S. (2023). THE DISCURSIVE CONSTRUCTION OF EUROPEAN TECHNOLOGICAL SOVEREIGNTY IN THE DIGITAL DOMAIN: IDEATIONAL CONDITIONALITIES AND LEGITIMIZATION STRATEGIES. Electronic Magazine of International Studies, 45. Scopus. https://doi.org/10.17103/reei.45.05