How did we get here?
Europe's dependence on foreign technology was not one decision. It accumulated over four decades, event by event.
Europe's dependence on foreign technology was not one conscious decision, or even a trend. It accumulated over four decades, event by event, while the things Europe was good at quietly persisted underneath. This timeline collects the moments that put us where we are, and the ones now pointing the way out. It is reviewed about once a year; last review July 2026.
The retreat: 1980-1992
Europe entered the 1980s still building its own computers: Bull in France, ICL in Britain, Nixdorf in Germany, Olivetti in Italy, Philips in the Netherlands. Within roughly a decade almost all of them sold out, merged away, or quit. What survived, and still matters today, were the quieter successes: payment cards, mobile standards, industrial automation, a British physicist's invention at CERN, and a Helsinki student's hobby operating system.
- 12 August 1981: IBM launches the IBM PC. Its architecture, and the Microsoft software running on it, becomes the world standard that European computer makers never catch up with.
- 1982: France rolls out Minitel nationwide, the world's first mass-market online service: millions of French households bank, book, and chat online a decade before the web.
- 1 September 1983: Denmark's Dankort processes its first transaction; together with France's interbank card decision (July 1984, the Cartes Bancaires consortium formally created January 1985), national payment cards become everyday European infrastructure.
- 27 September 1983: Richard Stallman announces the GNU project: software anyone may use, study, and share. Free software begins as an American idea; four decades later it is the foundation Europe's exit strategies stand on.
- 28 February 1984: The EU adopts ESPRIT, its first big co-funded IT research programme: the first admission that Europe's IT industry cannot survive on national efforts alone.
- 1987-1991: Honeywell folds its computer business into France's Bull, then exits entirely; the last big transatlantic computing alliance unwinds as the industry consolidates in America and Japan.
- 30 July 1990: Fujitsu buys 80 percent of ICL, Britain's flagship computer maker.
- 1 October 1990: Siemens absorbs Nixdorf, consolidating a shrinking German computer industry.
- 1990: Tim Berners-Lee's World Wide Web runs for the first time at CERN (proposed March 1989, given away royalty-free 30 April 1993). Europe invents the medium; America builds the businesses on top of it.
- 1991: Philips sells its computer division to America's Digital Equipment and exits the business.
- 1 July 1991: The first commercial GSM call is made in Finland. The European-led mobile standard becomes the continent's biggest technology export success.
- 25 August 1991: A student in Helsinki, Linus Torvalds, announces a free operating system: "just a hobby, won't be big and professional like gnu". GNU's missing kernel arrives from Europe, and Linux grows into the software running most of the internet, and the heart of the open-source alternatives now replacing US products in Europe's public administrations.
- 1 April 1992: RIPE NCC begins operating in Amsterdam: Europe gets its own internet address registry, a piece of internet governance it still controls.
- 6 July 1992: SAP launches R/3, the product that makes a German company the world's enterprise software leader, and Europe's great software exception.
Dependence normalized: 1992-2004
With its computer industry gone, Europe stopped experiencing dependence as a choice. Microsoft's office software became the default on European desks and in European procurement, so gradually that no single date marks it. Europe's strengths narrowed to what it already ran: mobile networks, payment systems, factory automation (Siemens' SIMATIC controllers, market leaders since the 1980s, still run much of the world's industry), and the internet's plumbing. Meanwhile a newly independent Estonia started building the state digitally from scratch, and Europeans' personal email quietly moved to American servers.
- November 1994 / 1995 / 1997: The London and Frankfurt internet exchanges (LINX, DE-CIX) are founded, and Amsterdam's peering point (AMS-IX), running informally since February 1994, is formally established as an association. They grow into the largest in the world, a lasting piece of European internet infrastructure.
- December 1995: The European standards body ETSI adopts TETRA, the digital radio standard that police, fire, and emergency services across Europe still run on today (Britain's Airwave, Germany's BOS network, Denmark's SINE).
- 4 July 1996: Hotmail launches; Microsoft buys it in December 1997. Free webmail begins moving Europeans' private correspondence onto US servers, years before anyone calls that a sovereignty question.
- January 1997: Olivetti sells its PC division; Italy's computing champion, the last of the big European makers, exits.
- October 1998: Nokia overtakes Motorola as the world's largest handset maker; for a decade, the most personal computer most people own is European.
- March 2000: The EU adopts the Lisbon Strategy, promising the world's most competitive knowledge economy by 2010; the ambition is right, the delivery is not.
- 2000: The 3G spectrum auctions extract £22.5bn in Britain and around EUR 50bn in Germany from Europe's telecoms operators, loading them with debt just as American platforms take over the profitable service layer above their networks.
- December 2001 / January 2002: Estonia deploys X-Road, the data exchange layer of its digital state, and issues its first national e-ID cards weeks later: proof that a European country can build core digital infrastructure itself.
- March 2002: The EU approves Galileo, its own satellite navigation system, after the Kosovo war demonstrates what depending on US-controlled GPS means in a conflict.
- 2003: Google opens its European headquarters in Dublin. Ireland's low-tax strategy makes it the beachhead through which US tech giants organize their European operations, and gives one member state a lasting stake in their success.
- 29 August 2003: Skype launches, built by Estonian engineers; two years later it is sold to eBay. A pattern sets in: Europe innovates, America acquires.
- 2002-2003: France's Alcatel holds around 37 percent of the world DSL equipment market: Europe still builds the access networks, even as it loses the services running over them.
Regulating what it no longer builds: 2004-2013
In this decade Europe discovered its most effective lever against the platforms: competition law. It also learned how hard building is. The attempts of the era, a Franco-German search engine, two French sovereign clouds, all failed, while the iPhone added a second American platform layer and Nokia's collapse ended Europe's last big hardware leadership. The era closes with two warnings few noticed: a cyberweapon aimed at European industrial controllers, and the switch-off of Minitel.
- 24 March 2004: The European Commission fines Microsoft EUR 497m for abusing its dominance: the moment Europe's relationship with US tech becomes primarily regulatory.
- 1 April 2004: Gmail launches. Personal data in exchange for free services becomes the normal deal for Europeans' email, search, and later their photos and documents.
- April 2005: Chirac and Schröder announce Quaero, a Franco-German search engine to answer Google; Germany withdraws in December 2006 and the project fades: the era's defining failed build.
- 1 December 2006: Alcatel merges with America's Lucent, beginning the consolidation that ends with Nokia absorbing what remains of Europe's telecom equipment industry.
- 9 January 2007: Apple announces the iPhone. The platform layer of mobile computing, Europe's strongest sector, becomes a US duopoly within five years.
- 7 July 2009: France creates ANSSI, its national cybersecurity agency, the institution that later defines Europe's strictest sovereign cloud rules.
- June 2010: Stuxnet is discovered, targeting Siemens industrial controllers: proof that the factory automation Europe leads in is also a geopolitical attack surface.
- September 2011: Britain scraps the NHS National Programme for IT after nine years and billions spent: Europe's biggest attempt at building sovereign health infrastructure fails, leaving the field to US vendors.
- 2012: France launches the sovereign clouds Numergy and Cloudwatt with state money; both fail within years. The lesson, that sovereignty requires customers and not just capital, shapes the next generation of attempts.
- 30 June 2012: France switches off Minitel. The symbol of Europe's early online lead goes dark.
- 3 September 2013: Microsoft buys Nokia's phone business. European leadership in mobile hardware, the continent's biggest tech success, is over.
The Snowden shock: 2013-2019
In June 2013 dependence stopped being abstract: Europe learned its data was being read. The courts responded faster than the politicians, striking down two transatlantic data deals, and the GDPR made European data protection a global export. Yet in the same years US platforms moved deeper into Europe's core institutions, into hospitals and police forces, and two events at the era's end showed that the real issue is not where data sits but whose law reaches it.
- 5 June 2013: The Snowden revelations begin: documented proof of mass US surveillance of European communications, including allied governments.
- 16 May 2014: ProtonMail launches, built by CERN scientists in Switzerland: the start of a wave of European privacy-first alternatives that a decade later host, among others, a prosecutor of the International Criminal Court.
- 23 July 2014: The EU adopts eIDAS, the first common framework for electronic identity across borders.
- 6 October 2015: The EU Court of Justice strikes down the Safe Harbor data deal (Schrems I): a law student's complaint about Snowden-era surveillance topples the legal basis for transatlantic data flows.
- 14 April 2016: The GDPR is adopted (applicable 25 May 2018): Europe's data protection rules become the standard the world's software must accommodate.
- 21 May 2016: Danish regions go live with Sundhedsplatformen, built on US vendor Epic: core European welfare infrastructure now runs on American platforms, a pattern repeated across the continent's hospitals.
- 30 August 2016: The Commission orders Apple to repay EUR 13bn in Irish tax aid; Ireland appeals on Apple's side, making the member-state stake in US tech explicit. (The EU's top court finally upholds the order on 10 September 2024.)
- 2017: Danish police formalize POL-INTEL, built on US analytics firm Palantir: American platforms enter European policing.
- 23 March 2018: The US enacts the CLOUD Act, asserting jurisdiction over data held by US providers anywhere in the world. From this point, "where is the data stored" is the wrong question; "whose law reaches the provider" is the right one.
- 5 November 2018: SWIFT disconnects Iranian banks under US sanctions pressure, against the EU's stated position: even payment infrastructure headquartered in Belgium follows Washington when forced to choose.
- 25 October 2019: France creates DINUM, the interministerial digital directorate that later leads its break with US software.
Sovereignty becomes policy: 2019-2024
"Technological sovereignty" entered the EU's official vocabulary in 2019 and produced the largest wave of digital regulation and infrastructure projects in the Union's history. The record is mixed: rules for platforms and chips passed, payment and satellite alternatives got funded, France wrote sovereignty into national law, and Europe's attempt to put sovereignty criteria into its common cloud certification collapsed. The era ends with the EU's own diagnosis that dependence has become a competitiveness emergency.
- 1 December 2019: The von der Leyen Commission takes office on a technological sovereignty agenda: the first time the concept anchors an EU political programme.
- January 2020: The EU publishes its 5G security toolbox; Huawei restrictions follow across member states, and telecom equipment becomes an openly geopolitical choice, with Ericsson and Nokia as strategic assets.
- 4 June 2020: France and Germany launch Gaia-X, a federated European cloud framework: much criticized, but the moment "European cloud" becomes a policy goal rather than a company.
- 16 July 2020: The Court strikes down Privacy Shield (Schrems II), the second transatlantic data deal to fall for the same reason: US surveillance law.
- 2020: Sixteen European banks found the European Payments Initiative; its wallet Wero launches in July 2024 as Europe's counterweight to Visa, Mastercard, and Apple Pay.
- 14 July 2021: The ECB opens the digital euro investigation: central bank money as sovereign payment infrastructure.
- 8 February 2022:Nvidia and SoftBank terminate Nvidia’s proposed acquisition of Arm after UK, EU, and US competition and national-security objections: Britain’s chip-architecture champion, sold to Japan’s SoftBank in 2016, stays independent, one of the rare cases where the sell-to-an-outside-buyer pattern is stopped rather than repeated.
- 2022: The Digital Markets Act and Digital Services Act are adopted: Europe moves from punishing platform dominance case by case to regulating it structurally.
- March 2022: ANSSI's SecNumCloud 3.2 requires immunity from non-EU law for qualified cloud providers: France defines, in technical detail, what a trusted European cloud means.
- 10 July 2023: The EU-US Data Privacy Framework takes effect: the third attempt at legal transatlantic data flows, with the Schrems question still open.
- 1 September 2023Dutch export controls on ASML’s most advanced lithography machines take effect, announced that June under sustained US pressure: the Netherlands restricts chip-making equipment sales to China, and Europe’s most strategically important tech company, already barred for years from selling its EUV systems there, becomes an explicit instrument of alliance politics.
- 13 September 2023: The European Chips Act is adopted (in force from 21 September 2023): subsidized semiconductor capacity as explicit industrial policy.
- 28 September 2023: France's Eutelsat completes its merger with satellite operator OneWeb: Europe assembles a commercial alternative in low-earth orbit.
- 26 February 2024: Mistral AI launches Le Chat, its consumer chat assistant, rebranded Vibe in May 2026: France’s answer to ChatGPT becomes the closest thing Europe has to a sovereign AI product reaching ordinary users.
- 22 March 2024: The sovereignty criteria are stripped from the draft EUCS, the EU's common cloud certification, under member-state and industry pressure; adoption stalls. The limit of the common approach, for now.
- 26 March 2024: eIDAS 2.0 is adopted: every member state must offer a European Digital Identity Wallet by the end of 2026.
- 21 May 2024: France promulgates the SREN law, writing cloud sovereignty requirements into national legislation where the EU level stalled.
- 1 August 2024:The EU AI Act enters into force, after political agreement in December 2023 and formal adoption on 21 May 2024: the world’s first comprehensive AI law joins GDPR, the DMA, and the DSA as rules global AI developers must accommodate.
- 9 September 2024: The Draghi report names technological dependence an existential competitiveness problem: the establishment adopts the sovereignty diagnosis.
- 16 December 2024: The EU signs the concession for IRIS², its own secure satellite constellation (290 satellites, services targeted for 2030).
The rebuild attempt: 2024-
The current era began when dependence stopped being a policy paper and became an experience: a war exposing reliance on one man's satellites, an international court reportedly losing its email under sanctions from an ally. The response is the first wave of concrete migrations, in Copenhagen, Paris, and The Hague, and the first EU legislative proposal that treats cloud and AI capacity as infrastructure to be built, not just regulated.
- March 2025: The debate over Ukraine's dependence on Starlink comes to a head; the EU turns to Eutelsat, whose chief executive concedes it cannot yet replace Starlink: Europe's satcom gap, stated plainly.
- 17 March 2025: More than a hundred organizations sign the EuroStack open letter, calling for a full European technology stack from chips to cloud to applications.
- May 2025: It is widely reported that the ICC chief prosecutor's Microsoft email account was suspended after US sanctions; Microsoft denies cutting services. Whatever the mechanics, the prosecutor moved to Proton Mail, the court later adopted the open-source openDesk suite, and institutions across Europe understood the message: access can be a weapon.
- June 2025: Denmark's digital ministry begins replacing Microsoft Office with LibreOffice, citing digital sovereignty after renewed US pressure on the kingdom over Greenland: dependence reassessed in the light of a changed alliance.
- September 2025: Tchap, the French state's own messenger, becomes mandatory for work communication across the administration.
- 17 November 2025: France's ANSSI and Germany's BSI publish joint cloud sovereignty criteria: the two big cybersecurity agencies align where EUCS could not.
- 31 March 2026:The French State completes a EUR 404m acquisition of Bull, Atos’s Advanced Computing arm, twelve years after Atos took control of it in 2014: the company named at the start of this timeline returns to French state ownership, sovereignty in supercomputing and AI stated as the reason.
- 8 April 2026: France commits to migrating public-sector PCs to Linux, starting with DINUM's own machines; every ministry must deliver a dependency-reduction plan by autumn 2026.
- 3 June 2026: The Commission proposes the Cloud and AI Development Act, a four-level sovereignty framework for public procurement: for the first time, EU law would rank cloud services by independence from foreign control.
Sources for every dated entry are linked or held in the nupath.eu editorial fact base. Corrections welcome: if you can source a better date, we will use it.
Subscribe to our newsletter to get the latest updates and news
