Denna referenslista innehåller ett urval av de källor som behandlats under presentationer och diskussioner under konferensen.
ACM (2022) Market Study Cloud services, Netherlands Authority for Consumers and Markets, Case no. ACM/21/050317, Document no. ACM/INT/440323, 5 September. https://www.acm.nl/system/files/documents/public-market-study-cloud-services.pdf
ArsTechnica (2025) Microsoft to stop using China-based teams to support Department of Defense, ArsTechnica, 26 July. https://arstechnica.com/security/2025/07/microsoft-to-stop-using-china-based-teams-to-support-department-of-defense/
Blind, K. & Böhm, M. (2019) The Relationship Between Open Source Software and Standard Setting, Thumm, N. (Ed.) EUR 29867 EN, JRC (Joint Research Centre) Science for Policy Report, Publications Office of the European Union, Luxembourg, 2019, ISBN 978-92-76-11593-9. https://doi.org/10.2760/163594
Blomqvist, P. (2024) Den borttappade huvudnyckeln och dess konsekvenser: En avslöjande rapport som beskriver omfattande brister i säkerhetskultur, rutiner och arkitektur hos Microsoft, Ärendenummer: TRV 2023/133263, Trafikverket, Borlänge, 5 maj. https://nikkasystems.com/wp-content/uploads/2024/05/1715697711849.pdf
bouncycastle.org (2025) Bouncy Castle – Open-source cryptographic APIs. https://www.bouncycastle.org/
Bowden, C. (2013) Ex-Microsoft privacy adviser: I don’t trust company, The Guardian, 30 September. https://www.theguardian.com/world/2013/sep/30/microsoft-privacy-chief-nsa
Caffarra, C. (2026) The ‘Sovereignty’ Narratives That Don’t Help Europe, Tech Policy Press, 31 July. https://www.techpolicy.press/the-sovereignty-narratives-that-dont-help-europe/
Cagnin, C., Muench, S., Scapolo, F., Störmer, E. & Vesnic-Alujevic, L. (2021) Shaping and securing the EU’s open strategic autonomy by 2040 and beyond, Joint Research Centre, European Commission, Publications Office of the European Union, Luxembourg, ISBN: 978-92-76-40991-5, ISSN: 1831-9424. https://doi.org/10.2760/727114
Chander, A. & Sun, H. (2022) Sovereignty 2.0, Vanderbilt Journal of Transnational Law, Vol. 55(2), Article 2. https://scholarship.law.vanderbilt.edu/vjtl/vol55/iss2/2/
de la Chapelle, B. & Porciuncula, L. (2021) We Need to Talk About Data: Framing the Debate Around Free Flow of Data and Data Sovereignty, Internet and Jurisdiction Policy Network, 31 March. https://www.internetjurisdiction.net/uploads/pdfs/We-Need-to-Talk-About-Data-Framing-the-Debate-Around-the-Free-Flow-of-Data-and-Data-Sovereignty-Report-2021.pdf
CICTAR (2022a) Amazon: The World’s Largest Company Is Subsidised By You, Centre for International Corporate Tax Accountability and Research, 24 May. https://cictar.org/s/CICTAR_AMAZON-FINAL-1.pdf
CICTAR (2022b) Microsoft: Gaming Global Taxes, Winning Government Contracts, Centre for International Corporate Tax Accountability and Research, 12 October. https://cictar.org/s/CICTAR_MICROSOFT-FINAL.pdf
CISA (2024) Review of the Summer 2023 Microsoft Exchange Online Intrusion, Cyber Safety Review Board, 20 mars. https://www.cisa.gov/sites/default/files/2025-03/CSRBReviewOfTheSummer2023MEOIntrusion508.pdf
Contreras, J. L. (2025) A Research Agenda for Standards-Essential Patents, In Bonadio, E. & Shemtov, N. (Eds.) A Research Agenda for Patent Law, Edward Elgar Publishing, Cheltenham, pp. 3-26. https://doi.org/10.4337/9781803927855.00008
Daskal, J. (2015) The Un-Territoriality of Data, The Yale Law Journal, Vol. 125, pp 328- 398. https://yalelawjournal.org/article/the-un-territoriality-of-data
Dudley, R. (2025) Microsoft Used China-Based Engineers to Support Product Recently Hacked by China, ProPublica: Investigative Journalism in the Public Interest, 1 August. https://www.propublica.org/article/microsoft-sharepoint-hack-china-cybersecurity
EC (2004) European Interoperability Framework for pan-European eGovernment Services, Version 1.0, European Commission, ISBN 92-894-8389-X. http://web.archive.org/web/20120710134922/https://ec.europa.eu/idabc/servlets/Docd552.pdf
EC (2012) Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions, Unleashing the Potential of Cloud Computing in Europe, COM(2012) 529 final, European Commission, 27 September. https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:52012DC0529
EC (2013) Commission Staff Working Document: Guide for the procurement of standards-based ICT – Elements of Good Practice, SWD(2013) 224 final, Accompanying the document: Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of Regions, Against lock-in: building open ICT systems by making better use of standards in public procurement, COM(2013) 455 final, European Commission, 25 June. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:52013SC0224
EC (2017) Annex to the Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions, European Interoperability Framework – Implementation Strategy, COM(2017) 134 final, Annex 2, European Commission, 23 March. https://eur-lex.europa.eu/resource.html?uri=cellar:2c2f2554-0faf-11e7-8a35-01aa75ed71a1.0017.02/DOC_3&format=PDF
EC (2021) Study about the impact of open source software and hardware on technological independence, competitiveness and innovation in the EU economy, European Commission, ISBN 978-92-76-30980-2. https://doi.org/10.2759/430161
EC (2024) Remarks by Executive Vice-President Vestager following the Court of Justice rulings on the Apple tax State aid and Google Shopping antitrust cases, European Commission, Speech/24/4624, 10 September. https://ec.europa.eu/commission/presscorner/detail/en%5E/speech_24_4624
EC (2025) Cloud Sovereignty Framework, Version 1.2.1, European Commission, October. https://commission.europa.eu/document/download/09579818-64a6-4dd5-9577-446ab6219113_en?filename=Cloud-Sovereignty-Framework.pdf
EC (2026a) Cloud Sovereignty Framework – Implementation guidance, News, European Commission, 1 June. https://commission.europa.eu/funding-and-tenders/find-calls-tender/tender-opportunities-department/tender-opportunities-digital-services_en#cloud-sovereignty-framework
EC (2026b) Cloud Sovereignty Framework: Implementation guidance, European Commission, 1 June. https://commission.europa.eu/document/download/2ad80a48-166f-4c77-a513-80c53ca2a128_en
EC (2026c) Communication on European Tech Sovereignty, accompanied by an EU Open Source Strategy, European Commission, 3 June. https://digital-strategy.ec.europa.eu/en/library/communication-european-tech-sovereignty-accompanied-eu-open-source-strategy
EC (2026d) Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions on European Tech Sovereignty, accompanied by an EU Open Source Strategy, COM(2026) 503 final, European Commission, 3 June. https://ec.europa.eu/newsroom/dae/redirection/document/129100
EC (2026e) Annexes to the Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions on European Tech Sovereignty, accompanied by an EU Open Source Strategy, COM(2026) 503 final, Annexes 1 to 2, European Commission, 3 June. https://ec.europa.eu/newsroom/dae/redirection/document/129101
EC (2026f) Cloud and AI Development Act, European Commission, 3 June. https://digital-strategy.ec.europa.eu/en/policies/cloud-and-ai-development-act
EC (2026g) Proposal for the Cloud and AI Development Act (CADA), Policy and Legislation, European Commission, 3 June. https://digital-strategy.ec.europa.eu/en/library/proposal-cloud-and-ai-development-act-cada
EC (2026h) Proposal for a Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe’s cloud and AI ecosystem (Cloud and AI Development Act), COM(2026) 502 final, 2026/0138 (COD), European Commission, 3 June.
https://ec.europa.eu/newsroom/dae/redirection/document/129111
EC (2026i) Annexes to the Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe’s cloud and AI ecosystem (Cloud and AI Development Act), COM(2026) 502 final, Annexes 1 to 3, European Commission, 3 June.
https://ec.europa.eu/newsroom/dae/redirection/document/129112
EC (2026j) Commission Staff Working Document Impact Assessment Report, Accompanying the document Proposal for a Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe’s cloud and AI ecosystem (Cloud and AI Development Act), SWD(2026) 502 final, Part 1/2, European Commission, 3 June.
https://ec.europa.eu/newsroom/dae/redirection/document/129113
EC (2026k) Commission Staff Working Document Impact Assessment Report, Accompanying the document Proposal for a Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe’s cloud and AI ecosystem (Cloud and AI Development Act), SWD(2026) 502 final, Part 2/2, European Commission, 3 June.
https://ec.europa.eu/newsroom/dae/redirection/document/129114
EC (2026l) Commission Staff Working Document Executive Summary of the Impact Assessment Report, Accompanying the document Proposal for a Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe’s cloud and AI ecosystem (Cloud and AI Development Act), SWD(2026) 503 final, European Commission, 3 June.
https://ec.europa.eu/newsroom/dae/redirection/document/129115
EC (2026m) The EU Open Source Strategy, European Commission, 3 June.
https://digital-strategy.ec.europa.eu/en/policies/open-source-strategy
EC (2026n) Strengthening Europe’s Tech Sovereignty, European Commission, 3 June.
https://digital-strategy.ec.europa.eu/en/policies/eu-tech-sovereignty
EC (2026o) Cyber Resilience Act, European Commission, 27 July. https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act
EC (2026p) Commission proposes tech sovereignty package to strengthen Europe’s digital autonomy and resilience, Press release, European Commission, 3 June. https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1187
EDPB (2023a) 2022 Coordinated Enforcement Action: Use of cloud-based services by the public sector, European Data Protection Board, Adopted on 17 January. https://edpb.europa.eu/system/files/2023-01/edpb_20230118_cef_cloud-basedservices_publicsector_en.pdf
EDPB (2023b) Annex: National Reports on the CEF cloud action, European Data Protection Board, Adopted on 17 January.
https://web.archive.org/web/20230301175553/https://www.edpb.europa.eu/system/files/2023-01/edpb_20230118_annex_national_reports_cef_cloud-basedservices_publicsector_en.pdf
EDPB (2023c) Coordinated Enforcement Action, use of cloud-based services by the public sector, European Data Protection Board, 18 January. https://www.edpb.europa.eu/documents/coordinated-enforcement-framework/coordinated-enforcement-action-use-of-cloud-based_en
EDPS (2024a) European Commission’s use of Microsoft 365 infringes data protection law for EU institutions and bodies, Press release, EDPS/2024/05, European Data Protection Supervisor, Brussels, 11 March. https://www.edps.europa.eu/system/files/2024-03/EDPS-2024-05-European-Commission_s-use-of-M365-infringes-data-protection-rules-for-EU-institutions-and-bodies_EN.pdf
EDPS (2024b) EDPS Investigation into use of Microsoft 365 by the European Commission (Case 2021-0518), Decision (8 March 2024), European Data Protection Supervisor, Brussels. https://www.edps.europa.eu/system/files/2024-03/24-03-08-edps-investigation-ec-microsoft365_en.pdf
EDPS (2025a) European Commission brings use of Microsoft 365 into compliance with data protection rules for EU institutions and bodies, Press release, EDPS/2025/07, European Data Protection Supervisor, Brussels, 28 July. https://www.edps.europa.eu/system/files/2025-07/2025-07-28_Press-Release_EDPS_Microsoft_EC_in_compliance_EN.pdf
EDPS (2025b) Subject: Closure of enforcement proceedings in the Commission’s use of Microsoft 365 (Case 2021-0518), Letter to the European Commission regarding the closure of enforcement proceedings in the Commission’s use of Microsoft 365, European Data Protection Supervisor, Brussels, 11 July. https://www.edps.europa.eu/system/files/2025-07/25-07-11_letter-to-commission_2021-0518_en.pdf
EK (2017) Annex 2, Bilaga till meddelande från kommissionen till Europaparlamentet, Rådet, Europeiska Ekonomiska och Sociala Kommittén och Regionkommittén, Europeiska interoperabilitetsramen – genomförandestrategi, COM(2017) 134 final, Europeiska Kommissionen, 23 mars.
https://eur-lex.europa.eu/resource.html?uri=cellar:2c2f2554-0faf-11e7-8a35-01aa75ed71a1.0013.02/DOC_3&format=PDF
ENISA (2023) Threats 2030: Identifying Emerging Cyber Security Threats and Challenges for 2030, European Union Agency for Cybersecurity, 29 March. https://www.enisa.europa.eu/publications/enisa-foresight-cybersecurity-threats-for-2030
eSam (2018) Checklista inför beslut om molntjänster i offentlig sektor, 31 oktober. http://web.archive.org/web/20201028053344/www.esamverka.se/download/18.1d126bc174ad1e6c39c88c/1542008743030/Checklista%20om%20molntj%C3%A4nster_20181031%20(002).pdf
eSam (2022) Tekniska förutsättningar i molntjänster, ES 2022-05, eSam, juni. https://www.esamverka.se/download/18.1ec521a61817ffb56514fea9/1656598104185/Tekniska%20f%C3%B6ruts%C3%A4ttningar%20i%20molntj%C3%A4nster%202.0_2022.pdf
eSam (2023a) Adekvansbeslut och ny sekretessbrytande bestämmelse– grönt ljus för amerikanska molntjänster?, eSam, 9 juni. https://www.esamverka.se/download/18.43a3add4188b9f2345a2ffd0/1687333877690/ES2023-10%20Adekvansbeslut%20och%20ny%20sekretessbrytande%20best%C3%A4mmelse%20-%20%C3%84r%20det%20gr%C3%B6nt%20ljus.pdf
eSam (2023b) Vägledning: Utkontraktering – sekretess och dataskydd, ES2023-06, eSam, juli. https://www.esamverka.se/download/18.43a3add4188b9f2345a2fe78/1687332814480/ES2023-06%20V%C3%A4gledning%20Utkontraktering%20-%20sekretess%20och%20dataskydd.pdf
eSam (2025a) Digitalt bevarande av data – problemområden, ES2025-01, eSam, januari. https://www.esamverka.se/download/18.27851b24193defb8cc0a79e/1737108639541/ES2025-01%20Digitalt%20bevarande%20av%20data%20-%20problemomr%C3%A5den.pdf
eSam (2025b) Allmänna handlingar i AI-utveckling, ES2025-11, eSam, juni. https://www.esamverka.se/download/18.2c1061191975d5b3870ef6/1750145864554/ES2025-11%20Rapport%20Allm%C3%A4nna%20handlingar%20i%20AI-utveckling.pdf
eSam (2026) Radarbilden – eSams halvårsrapport 2026, ES2026-03, eSam, februari. https://www.esamverka.se/download/18.25a737ec19c933b1fc085f/1775118086750/ES2026-03%20Rapport%20radarbild%20februari%202026.pdf
ETSI (2013) Cloud Standards Coordination, Final Report, European Telecommunications Standards Institute, Sophia Antipolis, November, Version 1.0. https://ec.europa.eu/newsroom/dae/document.cfm?doc_id=3988
EuroStack (2026) Who We Are, EuroStack. https://eurostack.eu/who-we-are/
Ewald, F. (2026) Bakom beredskapssatsningarna växer sårbarheten, Altinget. 25 mars. https://www.altinget.se/artikel/bakom-beredskapssatsningarna-vaxer-saarbarheten
Ewald, F. (2026b) Försäkringskassan och molnet, 31 maj. https://fiaewald.se/blogg/forsakringskassan-och-molnet/
Fischer, T., Lundell, B. & Gamalielsson, J. (2021) Achieving Conformance to Document Standards: Can PDF Files Conform to the PDF/A-1b Specification?, International Journal of Standardization Research (IJSR), Vol. 19(1), pp. 1-32. http://doi.org/10.4018/IJSR.288523
FM (2025) Försvarsmaktens hybrida multimolnstrategi, FM2004-3120:26, Version 1.0, Försvarsmakten, 18 december.
folketsai.se (2025a) Folkets AI-kommission. https://folketsai.se
folketsai.se (2025b) Remissvar över SOU 2025:12 AI-kommissionens Färdplan för Sverige, Folkets AI-kommission, 4 juni. https://folketsai.se/remissvar/
folketsai.se (2025c) Remissvar från Akademikerförbundet SSR, Folkets AI-kommission, 12 juni.
https://folketsai.se/akademikerforbundet-ssr/
folketsai.se (2025d) Remissvar från AI Policy Lab på Umeå universitet, Folkets AI-kommission, 23 juni. https://folketsai.se/ai-policy-lab/
folketsai.se (2025e) Remissvar från Björn Lundell, Folkets AI-kommissione, 17 juli. https://folketsai.se/remissvar-fran-bjorn-lundell/
France (2023) Opinion 23-A-8 of 29 June 2023 on competition in the cloud sector, Autorité de la concurrence, République Franḉaise. https://www.autoritedelaconcurrence.fr/sites/default/files/attachments/2023-09/23a08_EN.pdf
France and Germany (2026) Franco-German Joint paper on Digital Sovereignty, Joint paper of the French Direction générale des entreprises (DGE) and the German Federal Ministry for Digital Transformation and Government Modernisation (BMDS), 17 June.
https://www.entreprises.gouv.fr/files/files/presse/2026/20260617-franco-german-joint-paper-digital-on-sovereignty.pdf
Frances, I. & Hodgson, S. (2026) Microsoft finds software resale can be exhausting, DWF Group, 6 August. https://dwfgroup.com/en/news-and-insights/insights/2026/8/microsoft-finds-software-resale-can-be-exhausting
Furberg, P. & Westberg, M. (2020/21) Måste myndigheter följa lagarna? Om utkontraktering och legalitet i digital miljö, Juridisk tidskrift 2, pp. 406–417.
FSF (2026a) What is Free Software?, Free Software Foundation. https://www.gnu.org/philosophy/free-sw.html.en
FSF (2026b) The Free Software Definition, Free Software Foundation. https://www.gnu.org/philosophy/free-sw.html.en#fs-definition
FSF (2026c) Definitionen av fri programvara, Free Software Foundation. https://www.gnu.org/philosophy/free-sw.sv.html
Gamalielsson, J. & Lundell, B. (2017) On licensing and other conditions for contributing to widely used open source projects: an exploratory analysis, In Proceedings of the 13th International Symposium on Open Collaboration (OpenSym ‘17). ACM, New York, Article 9, 14p. http://doi.org/10.1145/3125433.3125456
Gamalielsson, J., Lundell, B., Brax, C., Persson, T., Mattsson, A., Gustavsson, T. & Feist, J. (2024) Open Source Software reference implementations for standards issued by different standards setting organisations: availability, perceptions and practices, Journal of Standardisation, Vol. 3(2). https://doi.org/10.59490/jos.2024.7140
Ghosh, R. A. (2005) Open Standards and Interoperability Report: An Economic Basis for Open Standards, FLOSSPOLS, Deliverable D4, MERIT, University of Maastricht, December.
Goitein, E. & James, H. (2026) The Truth Behind Section 702 Query Statistics , Brennan Center for Justice, 6 April. https://www.brennancenter.org/our-work/analysis-opinion/truth-behind-section-702-query-statistics
Hertogh, M., Quakkelaar, D., Raymakers, T., Mahesh, H. S., Marius, M., Bos, H. & van der Kouwe, E. (2026) Rain: Transiently Leaking Data from Public Clouds Using Old Vulnerabilities, In 2026 IEEE Symposium on Security and Privacy (SP), IEEE, ISBN 979-8-3315-6065-2, pp. 1172-1188, https://doi.ieeecomputersociety.org/10.1109/SP63933.2026.00063 https://download.vusec.net/papers/rain_sp26.pdf
Hon, W. K., Millard, C. & Walden, I. (2012) Negotiating Cloud Contracts: Looking at Clouds from Both Sides Now, Stanford Technology Law Review, Vol. 16(1), pp. 79-129.
HSC (2024a) Committee on Homeland Security, U.S. House of Representatives, Washington. https://homeland.house.gov/
HSC (2024b) A Cascade of Security Failures: Assessing Microsoft Corporation’s Cybersecurity Shortfalls and the Implications for Homeland Security, House Committee on Homeland Security, 13 June. https://homeland.house.gov/hearing/a-cascade-of-security-failures-assessing-microsoft-corporations-cybersecurity-shortfalls-and-the-implications-for-homeland-security/
Irion, K. (2012) Government Cloud Computing and National Data Sovereignty, Policy & Internet, Vol. 4(3-4), pp. 40-71. https://doi.org/10.1002/poi3.10
Irish (2023) Microsoft says IRS has demanded $28.9bn in back taxes, Irish Times, 12 October. https://www.irishtimes.com/business/2023/10/12/microsoft-says-irs-has-demanded-289bn-in-back-taxes/
Kalsi, M. (2024) NIST FIPS 203, 204, and 205 Finalized: An Important Step Towards a Quantum-Safe Future, 15 August, https://cloudsecurityalliance.org/blog/2024/08/15/nist-fips-203-204-and-205-finalized-an-important-step-towards-a-quantum-safe-future#
Katsikas, S. K. (2025) Towards a cybersecurity-oriented research agenda for digital sovereignty, Procedia Computer Science, Vol. 254, pp. 279-288. https://doi.org/10.1016/j.procs.2025.02.069
Klingensjö, S. & Sjöholm, U. (2017) Mellanhänder i offentlig upphandling, Uppdragsforskningsrapport 2017:1, Konkurrensverket, ISSN: 1401-8438.
https://www.upphandlingsmyndigheten.se/globalassets/dokument/publikationer/rapport_2017-1-002.pdf
Klingler, D. & Koch, R. (2025). Switzerland – Source Code Transparency through Public Procurement: The New Swiss Open Source Software Obligation, European Procurement & Public Private Partnership Law Review, Vol. 20(2), pp. 237-240. https://doi.org/10.21552/epppl/2025/2/14
Kristiansson, S. (2022) Försvaret av den svagaste länken, In Liljeberg, J. & Oksanen, P. (Eds.) Sveket mot cybersäkerheten, Fores, Stockholm, ISBN: 978-91-87379-87-1. https://fores.se/wp-content/uploads/2022/10/Online_Version_110x178_Cybersa%CC%88kerhet.pdf
van der Linden, F, Lundell, B. and Marttiin, P. (2009) Commodification of Industrial Software: A Case for Open Source, IEEE Software, Vol. 26(4), pp. 77-83. https://doi.org/10.1109/MS.2009.88
Lund, H. (2026) Collective Societal Risks: A Blind Spot in AI Governance: Implications for the EU and International Trade, National Board of Trade Sweden (Kommerskollegium), ISBN 978-91-89742-85-7, April. https://www.kommerskollegium.se/globalassets/publikationer/rapporter/2026/collective-societal-risks_a-blind-spot-in-ai-governance.pdf
Lundell, B. (2011) e-Governance in public sector ICT procurement: what is shaping practice in Sweden?, European Journal of ePractice, Vol. 12(6), pp. 66-78. http://web.archive.org/web/20110429011729/http://www.epractice.eu/files/European%20Journal%20epractice%20Volume%2012_6.pdf
Lundell, B. (2020) Analys av DIGG:s policy för utveckling av programvara, version 1.0, 20 maj, Skövde University Studies in Informatics 2020:1, ISSN 1653-2325, ISBN: 978-91-983667-6-1, University of Skövde, Skövde, Sweden. http://urn.kb.se/resolve?urn=urn:nbn:se:his:diva-18895
Lundell, B. (2025a) Comments on the evaluation of the public procurement directives, Dnr. HS 2025/227, Högskolan i Skövde, Skövde, 7 March, published as feedback to the European Commission’s public consultation ‘Public procurement directives – evaluation’, feedback reference: F3525431, European Commission, 12 March. https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14427-Public-procurement-directives-evaluation/F3525431_en
Lundell, B. (2025b) Comments on the Revision of the Standardisation Regulation, Dnr. HS 2025/450, Högskolan i Skövde, Skövde, 21 July, also published as feedback to the European Commission’s call for evidence on a revision of the Regulation (EU) No. 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, feedback reference: F3581814, European Commission, 21 July. https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14511-Standardisation-Regulation-revision/F3581814_en
Lundell, B. (2026) Comments on the review of the European Interoperability Framework, Dnr. HS 2026/501, Högskolan i Skövde, Skövde, 15 July, published as feedback to the European Commission’s call for evidence on a review of the the European Interoperability Framework, feedback reference: F33510915, European Commission, 15 July.
https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/18412-European-interoperability-framework-review/F33510915_en
Lundell, B., Butler, S., Fischer, T., Gamalielsson, J., Brax, C., Feist, J., Gustavsson, T., Katz, A., Kvarnström, B., Lönroth, E. & Mattsson, A. (2022a) Effective Strategies for Using Open Source Software and Open Standards in Organizational Contexts – Experiences From the Primary and Secondary Software Sectors, IEEE Software, Vol. 39(1), pp. 84-92. https://doi.org/10.1109/MS.2021.3059036
Lundell B., Gamalielsson, J., Butler, S., Brax, C., Persson, T., Mattsson, A., Gustavsson, T., Feist, J. & Öberg, J. (2021a) Enabling OSS usage through procurement projects: How can lock-in effects be avoided?, In Taibi, D. et al. (Eds.), The 13th International Conference on Open Source Systems (OSS 2021), IFIP AICT 624, Springer, pp. 1-12. https://doi.org/10.1007/978-3-030-75251-4_2
Lundell, B., Gamalielsson, J. & Katz, A. (2015) On implementation of Open Standards in software: To what extent can ISO standards be implemented in open source software?, International Journal of Standardization Research, Vol. 13(1), pp. 47-73. https://doi.org/10.4018/IJSR.2015010103
Lundell, B., Gamalielsson, J. & Katz, A. (2018) On Challenges for Implementing ISO Standards in Software: Can Both Open and Closed Standards Be Implemented in Open Source Software?, In Jakobs, K. (Ed.) Corporate and Global Standardization Initiatives in Contemporary Society, IGI Global, Hershey, ISBN 9781522553205, pp. 219-251. https://doi.org/10.4018/978-1-7998-9158-1.ch004
Lundell, B., Gamalielsson, J. & Katz, A. (2019) Implementing IT Standards in Software: challenges and recommendations for organisations planning software development covering IT standards, European Journal of Law and Technology, Vol. 10(2). https://ejlt.org/index.php/ejlt/article/view/709/
Lundell, B., Gamalielsson, J. & Katz, A. (2023a) Implementing the HEVC standard in software: Challenges and Recommendations for organisations planning development and deployment of software, Journal of Standardisation, Vol. 2. https://journals.open.tudelft.nl/jos/article/view/6695
Lundell, B., Gamalielsson, J., Katz, A. & Lindroth, M. (2021b) Perceived and Actual Lock-in Effects Amongst Swedish Public Sector Organisations when Using a SaaS Solution, In Scholl, H. J. et al. (Eds.) EGOV 2021: Electronic Government, Lecture Notes in Computer Science, Vol. 12850, Springer, Cham, pp. 59-72. https://doi.org/10.1007/978-3-030-84789-0_5
Lundell, B., Gamalielsson, J., Katz, A. & Lindroth, M. (2022b) Use of Commercial SaaS Solutions in Swedish Public Sector Organisations under Unknown Contract Terms, In Janssen, M. et al. (Eds.) EGOV 2022: Electronic Government, Lecture Notes in Computer Science, Vol 13391, Springer, Cham, pp. 73-92. https://doi.org/10.1007/978-3-031-15086-9_6
Lundell, B., Gamalielsson, J., Katz, A. & Lindroth, M. (2022c) Data Processing and Maintenance in Different Jurisdictions When Using a SaaS Solution in a Public Sector Organisation, JeDEM – eJournal of eDemocracy and Open Government, Vol. 14(2), pp. 214–234. https://doi.org/10.29379/jedem.v14i2.749
Lundell, B., Gamalielsson, J., Katz, A. & Lindroth, M. (2023b) Avoiding lock-in effects through obtaining all necessary licences before use of a SaaS solution in a public sector organisation: a case study, European Journal of Law and Technology, Vol. 14(1). https://ejlt.org/index.php/ejlt/article/view/861
Lundell, B., Gamalielsson, J. & Tengblad, S. (2016) IT-standarder, inlåsning och konkurrens: En analys av policy och praktik inom svensk förvaltning, Uppdragsforskningsrapport 2016:2, Konkurrensverket, ISSN: 1652-8089. http://www.konkurrensverket.se/globalassets/publikationer/uppdragsforskning/forsk_rapport_2016-2.pdf
Kundaliya, D. (2026) Microsoft’s EU tax report reveals how it juggles profits to minimise tax paid: A rare view of multinational tax planning, Computing, 6 July. https://www.computing.co.uk/news/2026/microsoft-tax-report-juggles-profits
Kunert, P. (2025) Microsoft admits it ‘cannot guarantee’ data sovereignty, The Register, 25 July. https://www.theregister.com/2025/07/25/microsoft_admits_it_cannot_guarantee/
Lundell, B. & van der Linden, F. (2013) Open Source Software as Open Innovation: Experiences from the Medical Domain, In Eriksson Lundström et al. (Eds.) Managing open innovation technologies, Springer, Heidelberg, pp. 3-16. https://doi.org/10.1007/978-3-642-31650-0_1
Lundell, B. & Lindroth, M. (2026/27) Fri och öppen programvara under Cyberresiliensförordningen: Konsekvenser för svenska företag?, Juridiskt Tidskrift (accepterad för publicering).
Lundell, B., Lindroth, M., Gamalielsson, J., Katz, A., Brax, C., Persson, T., Mattsson, A., Gustavsson, T., Feist, J. & Öberg, J. (2025) Half a step behind – bulk disclosure of confidential data in third-party GenAI solutions under the Swedish Public Access to Information and Secrecy Act, Digital Government: Research and Practice, Vol. 6(2), Article No. 25, pp. 1-9. http://doi.org/10.1145/3673659
McCarthy, T. (2015) NSA director defends plan to maintain ‘backdoors’ into technology companies, The Guardian, 23 February. https://www.theguardian.com/us-news/2015/feb/23/nsa-director-defends-backdoors-into-technology-companies
Microsoft (2025) Report on Corporate Income Tax Information, Microsoft Corporation.
https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/FY25-Microsoft-EU-Directive-2021-2101-Report.pdf
Miller, G. (2024) TRANSCRIPT: House Committee Hearing to Assess Microsoft’s Cybersecurity Shortfalls, Tech Policy Press, 15 June. https://www.techpolicy.press/transcript-house-of-homeland-security-hearing-on-assessing-microsofts-cybersecurity-shortfalls/
Neate, R. (2023) Microsoft’s Irish subsidiary posted £220bn profit in single year, 3 June. https://www.theguardian.com/world/2021/jun/03/microsoft-irish-subsidiary-paid-zero-corporate-tax-on-220bn-profit-last-year
news.admin.ch (2022) Digital sovereignty: President Cassis wants to strengthen Switzerland’s capacity to act in the digital space, 1 November, https://www.news.admin.ch/en/nsb?id=91033
NIST (2011) The NIST Definition of Cloud Computing, Special Publication 800-145, National Institute of Standards and Technology, Gaithersburg, September. https://doi.org/10.6028/NIST.SP.800-145
noyb (2026) noyb win: Microsoft ordered to stop tracking school children, 27 January. https://noyb.eu/en/noyb-win-microsoft-ordered-stop-tracking-school-children
NPS (2016) Open IT-standards, National Procurement Services, Kammarkollegiet, 7 mars, Dnr 96-38-2014, https://www.avropa.se/globalassets/dokument/open-it-standards.pdf
OpenAI (2026) OpenAI Services Agreement, Senast uppdaterad: 1 december 2025, 13 augusti 2026. https://cdn.openai.com/osa/openai-services-agreement.pdf
opensource.web.cern.ch (2026) Welcome to CERN’s Open Source Program Office. https://opensource.web.cern.ch/
OSD (2007) The Open Source Definition, Open Source Initiative, Version 1.9, Last modified: 22 March. https://opensource.org/osd/
OSI (2026) Open Source Initiative. https://opensource.org/
OSR (2006) Open Standards Requirement for Software, Open Source Initiative, 24 July. https://opensource.org/osr/
Panek, W. (2020) People’s Republic of China and the adequacy – Why Chinese data protection law is not adequate within the meaning of the GDPR, Masaryk University Journal of Law and Technology, Vol. 18(2), pp. 143-167. https://doi.org/10.5817/MUJLT2024-2-1
Pensionsmyndigheten (2015) Molntjänster i staten: en ny generation av outsourcing, Pensionsmyndigheten, Version 1.0, 28 december. https://www.pensionsmyndigheten.se/content/dam/pensionsmyndigheten/blanketter—broschyrer—faktablad/publikationer/svar-p%C3%A5-regeringsuppdrag/2016/Uppdrag%20att%20analysera%20potentialen%20f%C3%B6r%20anv%C3%A4ndning%20av%20molntj%C3%A4nster%20i%20staten%20.pdf
Piltch, A. (2025) Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks, The Register, 1 August. https://www.theregister.com/2025/08/01/microsoft_recall_captures_credit_card_info/
Privacy (2025) EDPS Closes Microsoft 365 Investigation, But Legal and Political Challenges Remain, Privacy Craft, 4 August. https://www.privacycraft.pro/post/edps-closes-microsoft-365-investigation-but-legal-and-political-challenges-remain
Regeringen (2023) Sekretessgenombrott vid utlämnande för teknisk bearbetning eller teknisk lagring av uppgifter, Regeringens proposition 2022/23:97, Regeringen, Stockholm, 23 mars. https://www.regeringen.se/rattsliga-dokument/proposition/2023/03/prop.-20222397
Regeringskansliet (2025a) Sveriges digitaliseringsstrategi 2025–2030, Regeringskansliet, 18 maj.
https://www.regeringen.se/regeringens-politik/digitaliseringsstrategin-2025-2030/
Regeringskansliet (2025b) Kompletterande bestämmelser till EU:s cyberresiliensförordning, SOU 2025:115, 9 december. https://www.regeringen.se/rattsliga-dokument/statens-offentliga-utredningar/2025/12/sou-2025115/
Regeringskansliet (2026a) Nya krav på interoperabilitet vid datadelning inom den offentliga förvaltningen, Prop. 2024/25:244, Finansdepartementet, Regeringskansliet, 16 april. https://www.regeringen.se/rattsliga-dokument/proposition/2026/04/prop.-202526244
Regeringskansliet (2026b) Bättre datakvalitet och förenklad datadelning i offentlig förvaltning, Pressmeddelande, Finansdepartementet, Regeringskansliet, 16 april. https://www.regeringen.se/pressmeddelanden/2026/04/battre-datakvalitet-och-forenklad-datadelning-i-offentlig-forvaltning/
Regeringskansliet (2026c) Ny molnpolicy ska bidra till ökad digital suveränitet i offentlig förvaltning, Pressmeddelande, Finansdepartementet, Regeringskansliet, 28 maj. https://www.regeringen.se/pressmeddelanden/2026/05/ny-molnpolicy-ska-bidra-till-okad-digital-suveranitet-i-offentlig-forvaltning/
Regeringskansliet (2026d) En molnpolicy för Sverige – för ökad säkerhet, effektivitet och innovation i den offentliga förvaltningen, Finansdepartementet, Regeringskansliet, 29 maj. https://www.regeringen.se/informationsmaterial/2026/05/en-molnpolicy-for-sverige–for-okad-sakerhet-effektivitet-och-innovation-i-den-offentliga-forvaltningen/
Regeringskansliet (2026e) Förordning om utveckling av moln och AI, Faktapromemoria, FPM-nummer: 99, Finansdepartementet, Regeringskansliet, 8 juli. https://www.regeringen.se/contentassets/33c29cbc651d40abb7b873433a6007a6/forordning-om-utveckling-av-moln-och-ai-202526fpm99/
Riksdagen (2026) Riksdagens snabbprotokoll 2025/26:144, Sveriges riksdag, 18 juni.
https://data.riksdagen.se/fil/94CC5C97-4C7E-4C23-A8E4-60AEA2EE1BC0
Rojszczak, M. (2020) CLOUD act agreements from an EU perspective, Computer Law & Security Review, Vol. 38, pp. 1-14. https://doi.org/10.1016/j.clsr.2020.105442
Sahibli, T. & Olsson, E. (2025) ”It-avtal en risk för svensk beredskap”, Svenska Dagbladet, 5 mars. https://www.svd.se/a/Vz2zld/advokater-it-avtal-en-risk-for-svensk-beredskap
Serrau, M. (2026) German public administration sets 2027 target for nationwide ODF standardisation, Open Source Observatory (OSOR), European Commission, 20 January. https://interoperable-europe.ec.europa.eu/collection/open-source-observatory-osor/news/germany-aims-standardise-odf-2027
SFS (2009) Offentlighets- och sekretesslag (2009:400), SFS nr: 2009:400, 20 maj. https://rkrattsbaser.gov.se/sfst?bet=2009:400
SFS (2018) Lag om informationssäkerhet för samhällsviktiga och digitala tjänster, SFS 2018:1174, utfärdad 20 juni 2018.
https://www.svenskforfattningssamling.se/sites/default/files/sfs/2018-06/SFS2018-1174.pdf
SFS (2020) Lag om tystnadsplikt vid utkontraktering av teknisk bearbetning eller lagring av uppgifter, Svensk författningssamling, SFS 2020:914, utfärdad 17 november 2020. https://svenskforfattningssamling.se/sites/default/files/sfs/2020-11/SFS2020-914.pdf
SFS (2023) Lag om ändring i offentlighets- och sekretesslagen (2009:400), Svensk författningssamling, SFS 2023:335, utfärdad 2 juni 2023. https://svenskforfattningssamling.se/sites/default/files/sfs/2023-06/SFS2023-335.pdf
SH (2024) Open Innovation and Open Source Strategy of Land Schleswig-Holstein, Version 1.00, The Minister-President, State Chancellery, Kiel, 20 November. https://www.schleswig-holstein.de/DE/landesregierung/themen/digitalisierung/linux-plus1/Service/Downloads/_dateien/open-source-strategy_EN.pdf?__blob=publicationFile&v=3
SKV/KFM (2021) Promemoria om ersättning av Skype i Skatteverkets och Kronofogdens verksamhet, Beslut, Skatteverket, Dnr. (Skatteverket): 8-958696, Dnr. (Kronofogden): KFM 10419–2021, 3 maj. https://www.skatteverket.se/omoss/varverksamhet/rapporterremissvarochskrivelser/remissvar/2021/remissvar2021/8958696.5.3016b5d91791bf54679d41.html
Skatteverket (2024a) Inledande utredning avseende Microsoft 365, Promemoria, Skatteverket, It-avdelningen, Dnr. 8-2800157, 26 februari. https://skatteverket.se/download/18.2fb39afe18dabf1e4d21f8c/1709296907224/Promemoria%20Inledande%20utredning%20Microsoft%20365.pdf
Skatteverket (2024b) Analys av Microsoft Entra ID, Bilaga 1, Promemoria, Skatteverket, It-avdelningen, Dnr. 8-2800157, 26 februari. https://skatteverket.se/download/18.2fb39afe18dabf1e4d21f9c/1709298988941/Bilaga%201.%20Analys%20av%20Microsoft%20Entra%20ID.pdf
Skatteverket (2024c) Analys av Microsoft 365 Apps for Enterprise, Bilaga 2, Promemoria, Skatteverket, It-avdelningen, Dnr. 8-2800157, 26 februari. https://skatteverket.se/download/18.2fb39afe18dabf1e4d21f90/1709296950847/Bilaga%202.%20Analys%20av%20Microsoft%20365%20Apps%20for%20Enterprise.pdf
Skatteverket (2024d) Analys av Microsoft Teams, Bilaga 3, Promemoria, Skatteverket, It-avdelningen, Dnr. 8-2800157, 26 februari. https://skatteverket.se/download/18.2fb39afe18dabf1e4d21f92/1709296969305/Bilaga%203%20Analys%20av%20Microsoft%20Teams.pdf
SLA (2025) Björn Lundell riktar kritik mot AI-kommissionens betänkande: ”Blir knas”, Skaraborgs Allehanda, 1 augusti. https://www.sla.se/2025/08/01/bjorn-lundell-riktar-kritik-mot-ai-kommissionens-betankande-blir-knas-079a1/
Slottner, E. (2026) Svar på fråga 2025/26:932 av Hanna Gunnarsson (V) Myndigheters beroende av amerikanska molntjänster, Fi2026/01612, Regeringskansliet, 9 juli 2026.
https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svar-pa-skriftlig-fraga/myndigheters-beroende-av-amerikanska-molntjanster_hd12932/
Smith, B. (2024) Microsoft’s Work to Strengthen Cybersecurity Protection, Written Testimony of Brad Smith (Vice Chair and President, Microsoft Corporation), U.S. House Committee on Homeland Security, Submitted on June 11, 2024 for the Committee’s Hearing on June 13, 2024.
https://homeland.house.gov/wp-content/uploads/2024/06/2024-06-13-HRG-Testimony-Smith.pdf
Specht, V. & Lundgren, A. (2026) “Din matvaruapp, din bankapp – alla är kopplade till datahandeln.”, Sydsvenskan, 12 augusti.
https://www.sydsvenskan.se/opinion/din-matvaruapp-din-bankapp-alla-ar-kopplade-till-datahandeln/
Speed, R. (2026a) Court tosses Microsoft’s appeal in pre-owned software licenses battle, The Register, 7 July. https://www.theregister.com/software/2026/07/07/court-tosses-microsofts-appeal-in-pre-owned-software-licenses-battle/5267742
Speed, R. (2026b) Double trouble for Microsoft as pre-owned software license claims converge, The Register, 5 August. https://www.theregister.com/saas/2026/08/05/double-trouble-for-microsoft-as-pre-owned-software-license-claims-converge-1/5282421
Statskontoret (2023) Good administration in European countries, Statskontoret (the Swedish Agency for Public Management), OOS 47, 8 March. https://www.statskontoret.se/siteassets/rapporter-pdf/2023/oos-47-utskriftsversion.pdf
Stürmer, M. & Koch, R. (2024) The new Swiss Open Source Law: “Public Money Public Code” by default, FOSDEM 2024, 3 February. https://archive.fosdem.org/2024/schedule/event/fosdem-2024-3401-the-new-swiss-open-source-law-public-money-public-code-by-default/
SVK (2021) Öppen antagonistisk hotbild för elförsörjningen, Ärendenr: 2021/4367, Svenska kraftnät, Sundbyberg, 1 november. https://www.svk.se/siteassets/3.sakerhet-och-beredskap/sakerhetsskydd/dokument/oppen-antagonistisk-hotbild-for-elforsorjningen-2021.pdf
SVT (2021) Källor till DR: USA bedrev spionage mot Saab – med hjälp av danska underättelsetjänsten, SVT Nyheter, 14 november 2020, uppdaterad 31 maj 2021. https://www.svt.se/nyheter/inrikes/kallor-till-dr-usa-bedrev-spionage-mot-saab-med-hjalp-av-danska-underattelsetjansten
SVT (2026a) ”Europa vill bryta digitala beroendet”, Sveriges Television, 25 april. https://www.svt.se/nyheter/ekonomi/europa-vill-bryta-digitala-beroendet
SVT (2026b) Försvaret nobbar techjättarnas moln för hemliga uppgifter, Sveriges Television, 30 maj. https://www.svt.se/nyheter/inrikes/forsvaret-nobbar-techjattarnas-moln-for-hemliga-uppgifter
SVT (2026c) Räknar med 500 jobb i Torsboda – SVT granskar underlaget, Sveriges Television, 17 juli, senast uppdaterad 20 juli.
https://www.svt.se/nyheter/lokalt/vasternorrland/lovar-500-jobb-i-torsboda-svt-granskar-underlaget
Säpo (2023) Säkerhetspolisen 2022 – 2023, Säkerhetspolisen, ISBN: 978-91-86661-23-6.
https://sakerhetspolisen.se/download/18.36cda2851868025da5b2b/1677241538918/SP_A%CC%8Arsbok_2022__Anpassad.pdf
Thévenet, A. (2025) Switzerland mandates software source code disclosure for public sector: A legal milestone, Open Source Observatory (OSOR), 6 January. https://interoperable-europe.ec.europa.eu/collection/open-source-observatory-osor/news/new-open-source-law-switzerland
TOI (2026) How a case Oracle lost 14 years ago is troubling Microsoft, forcing it to seek a lifeline from UK’s Supreme Court, The Times of India, 28 July. https://timesofindia.indiatimes.com/technology/tech-news/how-a-case-oracle-lost-14-years-ago-is-troubling-microsoft-forcing-it-to-seek-a-lifeline-from-uks-supreme-court/articleshow/132675114.cms
TV4 (2021) Svenska topp-politiker avlyssnade av USA – ”Djupt chockade”, TV4 Nyheterna, 31 maj. https://www.tv4.se/artikel/2Hbaa71UdzUBH4Dxr8mY5s/svenska-topp-politiker-avlyssnade-av-usa-djupt-chockade
UK (2025) Cloud Infrastructure Services: Final decision report, Competition & Markets Authority, 31 July, 637p. https://assets.publishing.service.gov.uk/media/688b8891fdde2b8f73469544/final_decision_report.pdf
US (2026a) Foreign Intelligence Surveillance Act, Office of the Director of National Intelligence. https://www.intelligence.gov/foreign-intelligence-surveillance-act
US (2026b) Section 702 of the Foreign Intelligence Surveillance Act, March. https://www.intelligence.gov/assets/documents/702-documents/702_Booklet-FINAL.pdf
Vaughan-Nichols, S. (2024) Switzerland federal government requires releasing its software as open source, ZDNET, 23 July. https://www.zdnet.com/article/switzerland-now-requires-all-government-software-to-be-open-source/
WEF (2021) What is digital sovereignty and why is Europe so interested in it?, World Economic Forum, 15 March. https://www.weforum.org/agenda/2021/03/europe-digital-sovereignty/
Woollacott, E. (2025) Microsoft Can’t Keep EU Data Safe From US Authorities, Forbes, 22 July. https://www.forbes.com/sites/emmawoollacott/2025/07/22/microsoft-cant-keep-eu-data-safe-from-us-authorities/
YLE (2026) Datacenterboomen hotar göra din el dyrare: ”De borde inte anslutas till elnätet”, 18 april. https://yle.fi/a/7-10096883
Öberg, N. (2026) Digital handlingsfrihet är vägen framåt, Dagens Industri, 19 maj. https://www.di.se/debatt/digital-handlingsfrihet-ar-vagen-framat/
Öberg, N., Fors, A. & Stierna, N. (2019) Vitbok – Molntjänster i samhällsbärande verksamhet – risker, lämplighet och vägen framåt, Dnr. 013428-2019, Version 1.0, Försäkringskassan, 18 november. https://www.forsakringskassan.se/download/18.4ea7f1ee19c0e30b2af106/1771248795563/vitbok-publika-molntjanster-i-samhallsbarande-verksamhet.pdf