Author: heise.de
Source: heise.de
Publication Date: 2025-12-29
Reading Time: approx. 4 minutes


Executive Summary

German federal states preach digital sovereignty, but practice the opposite: 15 out of 16 states continue to rely on Microsoft Office and are even migrating to US cloud solutions. This significantly strengthens technological dependency and creates security risks through potential US sanctions – a fundamental credibility problem for federal IT policy. Only Schleswig-Holstein consistently follows an open-source strategy.


Critical Key Questions

  1. Freedom & Independence: How can Germany speak of digital sovereignty while consciously leading its authorities into technological dependence on US corporations?

  2. Responsibility & Risk: Who bears responsibility if US sanctions suddenly cut off authorities from email and communication capabilities?

  3. Transparency: Why do federal states argue with "future cloud-only strategies" from Microsoft instead of questioning this dubious prognosis?

  4. Innovation & Alternatives: Why is the functioning open-source model of Schleswig-Holstein not used as a blueprint for other states?

  5. Data Protection: How is the cloud migration compatible with European and German data protection requirements?


Scenario Analysis: Future Perspectives

Time HorizonDevelopment
Short-term (1 year)Further cloud migrations by large states; initial technical dependencies emerge
Medium-term (5 years)Microsoft pushes cloud-only model; German authorities have little room for action
Long-term (10–20 years)Strategic vulnerability through US sanctions and geopolitical risks; possible emergency migrations under pressure

Key Statements

Contradiction Between Rhetoric and Practice

The Digital Minister's Conference defines digital sovereignty as "a fundamental prerequisite for technological and economic competitiveness". The reality: 15 out of 16 federal states ignore this maxim and deepen their Microsoft dependency.

Key Facts & Figures

  • 15 out of 16 federal states rely on Microsoft Office
  • 3 large states (Bavaria, Lower Saxony, North Rhine-Westphalia) are migrating to Microsoft cloud services
  • 1 exception: Schleswig-Holstein with consistent open-source strategy
  • ⚠️ Sanctions Risk: Explicit security consequences of US sanctions not quantified

Stakeholders & Affected Parties

GroupInterestStatus
Federal States (14)Cost savings, technical simplicityDependent
Schleswig-HolsteinDigital autonomyResistant
Citizens & Authority UsersData protection, availabilityAt Risk
MicrosoftMarket expansionBeneficiary
US GovernmentGeopolitical controlController

Opportunities & Risks

OpportunitiesRisks
Short-term lower operating costsLong-term strategic vulnerability
Technical standardizationLack of alternative options in case of failures
Faster cloud integrationData protection and compliance risks
Learning effects from other countries possibleSanctions risks from US foreign policy

Action Relevance

For Decision-Makers:

  • Evaluate Schleswig-Holstein's open-source approach as a federal pilot project
  • Conduct independent risk analysis on US sanctions
  • Develop vendor-independent IT standards
  • Anchor digital sovereignty not as rhetoric but as binding procurement requirement

Quality Assurance & Fact-Checking

  • [x] Central statements verified (c't survey, Digital Minister's Conference November)
  • [x] Schleswig-Holstein confirmed as open-source pioneer
  • [x] Security risks from cloud migration comprehensible
  • [x] Unconfirmed prognoses ("cloud-only future") marked with ⚠️

Supplementary Research

  1. Schleswig-Holstein Open-Source Initiative: Official documentation of IT strategy and long-term results
  2. BSI Report on Digital Sovereignty: Federal Office for Information Security – risk assessment
  3. European Cloud Initiatives: Gaia-X, PRACE – alternative sovereignty strategies

Bibliography

Primary Source:
Microsoft Cloud vs. Delos vs. openDesk: The Office Plans of the Federal States – heise.de

Verification Status: ✓ Fact-checked on 2025-12-29


This text was created with support from Claude (Anthropic).
Editorial Responsibility: clarus.news | Fact-Checking: 2025-12-29