EU-UK Summit: What Does It Mean for EU Digital Policy?

The first EU-UK summit since Brexit marks a turning point in strategic cooperation, long sought by most people on both sides. While the spotlight was on forging a common stance on geopolitical challenges and establishing a defence and security partnership, the summit also laid the groundwork for deeper collaboration in two areas central to the EU’s digital policy agenda: cybersecurity and law enforcement cooperation.

Cybersecurity: from sea to space

The “Security and Defence Partnership” provides a framework for enhanced cooperation on cyber issues. The main feature is that the EU and the UK will join efforts to counter cyber threats and hybrid attacks, aligning with the EU Cybersecurity Strategy. To do so, they will increase cooperation, including holding regular high-level dialogues and strategic exchanges.

Furthermore, the EU and the UK will seek to strengthen the resilience of critical infrastructure. Space and maritime cybersecurity received a separate mention, which is not surprising as it is an area that has been gaining relevance in light of third country interference, sabotage and attack,  on subsea cables for example.

Space and maritime cybersecurity received a separate mention, which is not surprising as it is an area that has been gaining relevance in light of third country interference, sabotage and attack,  on subsea cables for example.

Justice and home affairs: total war against “tech-enabled” crime

Both parties agree on the starting point: the situation is not the same as five years ago, and technology-enabled organised crime merits reinforced cooperation between Europol, the EU’s law enforcement agency, and the UK’s National Crime Agency.

The agenda goes further, encompassing initiatives that have previously sparked controversy within the EU, such as enabling law enforcement to make direct requests to service providers across borders, which is central to the EU’s E-Evidence Regulation or the sharing of biometric data.

When it comes to data sharing, the commitment is to go beyond the current exchange of fingerprints, DNA and criminal records of third-country nationals. Enhanced mechanisms for biometric data exchange, including facial image data, will be added to the mix. The UK is very clear that this is needed “to help identify individuals who pose a risk to people’s safety”[1]. In the European Commission’s words, the end goal is “the prevention, detection and investigation of criminal offences”.[2] The ambition, however, depends on the EU’s current reform of the Europol Regulation and its alignment with the EU’s data protection framework, particularly as debates around the reopening of the GDPR and the implementation of the AI Act intensify.

In the European Commission’s words, the end goal is “the prevention, detection and investigation of criminal offences”

On access to Electronic Evidence, both sides acknowledged the challenges law enforcement faces in accessing digital evidence across jurisdictions. They agreed, therefore, to explore solutions to speed up investigations beyond Mutual Legal Assistance Treaties. One idea is simply to allow law enforcement in one jurisdiction to make requests for electronic data directly to service providers in another jurisdiction, in line with the EU E-Evidence Regulation.

What’s next

The three-part package is currently a political declaration, not a legal framework. The differences in wording that can be found in the official statements of European Commission, Council of the EU and UK government are a testament of the fact that more substantial talks are needed. The expected biannual security dialogues and regular high-level meetings in the areas of justice and home affairs will be critical in shaping the operational details of the commitments and its alignment with EU digital policy, particularly around cybersecurity, data access, and fundamental rights safeguards.

To engage meaningfully, the time to act is now

The issues at stake are politically sensitive and technically complex. Without a proactive advocacy strategy, industry stakeholders, and civil society risk being sidelined in shaping the discussion.

Calling for an inclusive dialogue and robust oversight is not enough. To influence outcomes organizations must:

1. Prepare your advocacy plan: Define your goals, key messages and resources you’ll need, before negotiations begin.
2. Map and understand the landscape: Each topic will be led by different actors. Identify who holds influence, at what level, and when to engage is key to have an impact.
3. Track and engage in consultations: Consultations will emerge quickly on both sides of the Channel. Anticipate them as response windows will be short.
4. Coordinate across networks: Align with partners across the EU and UK to amplify your voice. Building coalitions early is essential to share intelligence and strengthen your chances of being heard.

[1] https://www.gov.uk/government/publications/ukeu-summit-key-documentation/uk-eu-summit-explainer-html

[2] https://ec.europa.eu/commission/presscorner/detail/en/statement_25_1267