List of proposals for EuroDIG 2027

02-11-26 | 08:36 Innovation & economic issues | Reform of International Investment Law Agreements & Reform of World Trade Organization Due to the following issues, my proposal considers reform of International Investment Law Agreements & Reform of WTO: 1) Necessity to realign the Trade rules to what's actually happening on the ground 2) WTO Reform Process in order to perform better 3) Underpinnings in Economy 4) Comprehensive Trade Agenda for Future

Submitted by: Marjan Hamidia

Affiliation: N/A

Stakeholder: Private sector

02-11-26 | 16:52 Access & literacy | Innovation & economic issues | Technical & operational issues Supply chains development and associated technologies and frameworks

Submitted by: Amali De Silva-Mitchell

Affiliation: IGF-DC-DDHT

Stakeholder: Other

03-11-26 | 09:06 Human rights & privacy | Innovation & economic issues | Technical & operational issues From AI Regulation to Verifiable AI Governance – How Can Europe Demonstrate Control over AI? Europe is moving from AI regulation to practical implementation. However, a fundamental question remains: How can organisations demonstrate, through verifiable evidence, that their AI systems are responsibly governed, controlled and accountable throughout their lifecycle? AI governance cannot be reduced to regulatory compliance or documentation. Organisations need to understand their AI systems, dependencies on external providers, decision-making processes, human oversight and operational risks. This challenge is particularly relevant across Europe, where AI systems, cloud infrastructure, technology providers and regulatory responsibilities increasingly cross national borders. EuroDIG 2027 should address three fundamental questions: What evidence is necessary to demonstrate effective AI governance and organisational accountability? How can transparency, human oversight and independent verification strengthen trust in AI systems? How can Europe establish practical, proportionate and internationally compatible approaches to AI assurance without restricting innovation? The objective is to explore how Europe can move beyond declarations of compliance towards demonstrable, evidence-based and continuously verifiable AI governance.

Submitted by: Karsten Klaus Mueller

Affiliation: KM Systemberatung

Stakeholder: Private sector

03-11-26 | 09:11 Human rights & privacy | Innovation & economic issues | Technical & operational issues Digital Sovereignty Beyond Infrastructure – Who Actually Controls Europe's AI? Europe increasingly relies on AI models, cloud platforms and computing infrastructure supplied by a small number of global companies. Hosting data in Europe, however, does not automatically mean controlling the systems that process it. Digital sovereignty also depends on transparency of technical and contractual dependencies, access to essential information, interoperability, portability and operational resilience. An organisation may keep its data within Europe yet remain dependent on external decisions about model updates, pricing, access and service availability. For European governments, businesses and citizens, this raises a central question: What does meaningful digital sovereignty look like in an AI-driven economy? EuroDIG 2027 should discuss: Which technological and contractual dependencies most constrain Europe's ability to act independently? How can transparency, portability and verifiable oversight reduce lock-in without isolating Europe from global innovation? What responsibilities should policymakers, providers and users share to ensure resilience and effective control? The aim is to move beyond the location of infrastructure towards demonstrable capabilities to understand, govern and, when necess

Submitted by: Karsten Klaus Mueller

Affiliation: KM Systemberatung

Stakeholder: Private sector

03-11-26 | 09:14 Human rights & privacy | Innovation & economic issues | Security & crime Responsible AI for European SMEs – How Can Governance Become Practical and Affordable? Small and medium-sized enterprises are central to Europe's economy, yet many face a difficult choice: adopt AI to remain competitive or invest scarce resources in legal interpretation, governance expertise and technical controls. The result may be delayed innovation, uneven protection and growing dependence on external providers. Responsible AI should not be a privilege of large organisations. European SMEs need proportionate ways to understand where AI is used, assess risks, define accountability, maintain human oversight and document evidence of effective controls. They also need clarity about what they can reasonably expect from vendors. EuroDIG 2027 should explore: What minimum governance capabilities should every SME have before and after deploying AI? How can shared guidance, open tools and affordable independent assurance help SMEs demonstrate responsible AI use? How can EU and national initiatives align practical support, digital skills and innovation without creating excessive bureaucracy? The aim is to identify a scalable European approach that makes responsible AI both credible and achievable for smaller organisations, across sectors and borders.

Submitted by: Karsten Klaus Mueller

Affiliation: KM Systemberatung

Stakeholder: Private sector

03-11-26 | 13:23 Innovation & economic issues | Technical & operational issues The Internet routing system (BGP) is rarely considered in the context of cybersecurity-related public policy and regulations, including the various EU Cyber Acts, even though this remains an insecure aspect of ICT that can compromise data sovereignty and is increasingly used as an attack vector through route leaks, hijacks and IP address spoofing. Whilst measures such as RPKI have been developed in recent years to improve routing security, adoption has been limited and still does not address the fundamental issue of limited control over where data is transiting. Even if data is encrypted during transmission, it is still possible to undertake traffic interception and reconnissance as much information can still be gleaned simply from knowing who is sending traffic to whom. Data travelling through unauthorised (e.g. GDPR) or hostile jurisdictions also opens up the possibilities of 'harvest now, decrypt later, especially looking towards a post-quantum world. This is of particular concern for networks carrying sensitive data such as in government, defence or healthcare applications. Let's raise awareness of the problems with the global routing system, how it needs to be considered within policy and regulatory environments with reference to NIS2, the EU Cybersecurity Act, DORA and GDPR, and the importance of dealing with all aspects of the Internet as European governments and organisations are becoming increasingly concerned with the sovereignty of ICT infrastructures and data. Some technical solutions such as MANRS and SCION can also be touched upon.