{"id":1752,"date":"2025-07-15T08:50:03","date_gmt":"2025-07-15T08:50:03","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/1752\/"},"modified":"2025-07-15T08:50:03","modified_gmt":"2025-07-15T08:50:03","slug":"google-defends-uk-deal-amid-data-sovereignty-concerns","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/1752\/","title":{"rendered":"Google defends UK deal amid data sovereignty concerns"},"content":{"rendered":"<p>        Google offers the key, but holds the door<\/p>\n<p>            <img decoding=\"async\" loading=\"lazy\" alt=\"\" src=\".\/media_1b0a80e325de90d5991ca9c5c53cfcd2c3c2e7fcb.jpg?width=750&amp;format=jpg&amp;optimize=medium\" width=\"2100\" height=\"1401\"\/><\/p>\n<p>Image:<\/p>\n<p>Hayete Gallot, president of customer experience at Google Cloud, says the company has a responsibility to build the tech ecosystem<\/p>\n<p>Google\u2019s insists data it holds is secure and it won\u2019t create lock-in for the UK government, but do the answers match the ambition?<\/p>\n<p>Peter Kyle\u2019s announcement of a large-scale partnership between Google and the UK government has, it\u2019s fair to say, been treated with suspicion \u2013 not least in this publication. <a href=\"https:\/\/www.computing.co.uk\/news\/2025\/peter-kyle-addresses-big-tech-criticisms\" rel=\"nofollow noopener\" target=\"_blank\">Writing from Google Cloud London last week<\/a>, I asked three important questions: How will data sovereignty be respected? Is putting a US hyperscaler at the heart of digital government wise? And how will the government avoid vendor lock-in?<\/p>\n<p>I was able to talk to Hayete Gallot, Google Cloud\u2019s president of customer experience, the same day to get some answers.<\/p>\n<p>Despite only joining Google this year, Hayete has plenty of Big Tech experience; she previously spent 15 years at Microsoft and a decade at Canadian telephony giant Nortel. One would expect her to toe the party line, and she did \u2013 but that line turned out to be pretty vendor-agnostic.<\/p>\n<p>        Data sovereignty<\/p>\n<p>Concerns about data sovereignty aren\u2019t limited to Europe, Hayete told me. Instead, \u201cIt&#8217;s a global requirement,\u201d even \u2013 increasingly \u2013 for firms in non-regulated industries.<\/p>\n<p>&#8220;When you&#8217;re non-regulated, it&#8217;s more, \u2018How can I show to my government that, strategically, I&#8217;m minimising my dependence on a US company, and I&#8217;m making sure that as a key company from the country, I have a plan?&#8221;<\/p>\n<p>That sentiment is \u201cdriving a lot of demand\u201d for a public cloud data boundary, like the one Google <a href=\"https:\/\/www.computing.co.uk\/news\/2025\/cloud\/google-strengthens-sovereign-cloud-for-europe\" rel=\"nofollow noopener\" target=\"_blank\">launched in May<\/a>. More on that below.<\/p>\n<p>The company is also setting up a network of \u201ctrusted local partners,\u201d because customers \u201cwant a company that is linked to the country to operate the service,\u201d giving both data and operational control.<\/p>\n<p>Currently, this service &#8211; known as Google Cloud Dedicated \u2013 is only available in France, though a German expansion is coming.<\/p>\n<p>A spokesperson told me, \u201cWe have active partnerships, like the &#8216;The Cloud de Confiance by S3NS&#8217; with Thales in France, designed to offer a rich set of Google Cloud services with GPUs to support AI workloads, and is operated by S3NS, a standalone French entity.\u201d<\/p>\n<p>Finally, the most stringent option is an air gap solution totally disconnected from the internet, often used in sectors like defence and intelligence.<\/p>\n<p>        US cloud in UK government<\/p>\n<p>Those services are all very well, but how do they work with the US CLOUD Act? This controversial law is a big driver towards data sovereignty; it allows US authorities to compel US-based tech firms to provide data stored on their servers, regardless of whether that data is stored locally or on foreign soil.<\/p>\n<p>Hayete says, for some customers, encryption keys guard against that scenario.<\/p>\n<p>\u201cIf you&#8217;re on Data Boundary, you can control your encryption keys&#8230; If we receive a request from the government, we then direct that to the customer. Since they own their encryption keys, they can decide whether they want to decrypt that information or not.&#8221;<\/p>\n<p>This sounds good in theory, but governments around the world (<a href=\"https:\/\/www.computing.co.uk\/news\/4029476\/org-home-office-transparency-encryption\" rel=\"nofollow noopener\" target=\"_blank\">including in the UK<\/a>) are trying to force tech firms to provide back doors into their encryption. And Google\u2019s belief that providing encrypted data will satisfy its legal requirements hasn\u2019t yet been tested in a court of law.<\/p>\n<p>So, whether your data is protected from CLOUD Act requests as a Data Boundary customer is still up in the air; but, Hayete pointed out, local partners like France\u2019s Thales don&#8217;t have to follow US government directives. If you\u2019re concerned about US intrusion, Google Cloud Dedicated may be a safe route \u2013 but only if you live in France.<\/p>\n<p>For everyone else, we have to rely on the legally untested protections offered by Data Boundary, or the nuclear option of air gapping.<\/p>\n<p>Hayete couldn\u2019t confirm if the UK government is a Data Boundary customer.<\/p>\n<p>        Lock-in<\/p>\n<p>In his speech, Kyle made a big deal out of \u201cball and chain\u201d legacy contracts that were costing the public sector money without delivering in return. So, it was a surprise to see him then turn around and talk passionately about the new deal with Google. What, I asked, is to stop the same thing happening again?<\/p>\n<p>\u201cWe don&#8217;t lock people onto Google stack,\u201d said Hayete. \u201cI think what [Peter Kyle] was saying is, \u2018I&#8217;m working with a vendor that&#8217;s willing to work with us, but we [Google] will have to prove ourselves.\u2019\u201d<\/p>\n<p>The lack of technical lock-in is a good thing. But, part of the Google-government announcement was a commitment to train and upskill 100,000 public sector workers on digital and AI skills by 2030. What about those people? Won\u2019t training them on Google technology create indirect lock-in?<\/p>\n<p>There are two tracks public sector workers can take in this training, Hayete explained. The first is a generic set of training that simply educates people about AI, cybersecurity and digital. The second allows people to choose a specialisation; this track operates on Google Cloud.<\/p>\n<p>The main point of the programme is to &#8220;build that digital literacy\u201d, which \u201chas nothing to do with the [Google Cloud] platform.\u201d<\/p>\n<p>Hayete added, &#8220;Most of the skilling, I think, that is being envisioned is just employees who are trying to get literate in AI [and] in digital.\u201d<\/p>\n<p>You may have noticed that this isn\u2019t an outright denial of the theory that this programme will create indirect lock-in. While the majority of people may only follow the generic training, it\u2019s reasonable to assume that technical employees will opt to choose a specialisation using Google Cloud.<\/p>\n<p>Hayete says the training is part of Google\u2019s \u201cresponsibility to drive the [tech] ecosystem,\u201d in the same way the company created an agent-to-agent protocol.<\/p>\n<p>\u201cAt the end of the day, [that] will help our customers being able to actually deploy those multi-agent experiences. You give on one side, you get in the longer run&#8230; Like skilling: if you want the technology to be adopted, you need to make sure everybody can participate.\u201d<\/p>\n<p>The partnership between government and Google raised eyebrows when it was announced last week. While these answers will soothe industry concerns, some of the responses still lack clarity \u2013 and that\u2019s not what you want in government.<\/p>\n","protected":false},"excerpt":{"rendered":"Google offers the key, but holds the door Image: Hayete Gallot, president of customer experience at Google Cloud,&hellip;\n","protected":false},"author":2,"featured_media":1753,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[1336,59,844,1337,57,58,50,1338,56,735,54,55],"class_list":["post-1752","post","type-post","status-publish","format-standard","has-post-thumbnail","category-united-kingdom","tag-data","tag-gb","tag-google","tag-google-cloud","tag-great-britain","tag-greatbritain","tag-news","tag-skills","tag-uk","tag-uk-government","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/1752","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=1752"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/1752\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/1753"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=1752"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=1752"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=1752"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}