Open Source & EU Policy

CRA overview for everyone, including projects and smaller organisations

UA2.118 (Henriot)
Ciarán O'Riordan
<p>This talk is for a broad audience, including projects and smaller organisations that don't have compliance and policy staff. The primary goal is to give people information so that they can check if they have CRA obligations, and what compliance work might be required. It will also show what projects can do voluntarily to make compliance work easier for others that want to use their software.</p> <p>The secondary goal of this session is to enable more people to participate or provide feedback. Eclipse Foundation and other entities of the FOSS ecosystem are creating educational materials and compliance tools. To ensure that such tools are useful for the entire ecosystem, feedback is needed from all types of projects and organisations. Do the current information resources meet your needs? What more would be useful?</p>

Additional information

Live Stream https://live.fosdem.org/watch/ua2118
Type devroom
Language English

More sessions

2/1/26
Open Source & EU Policy
UA2.118 (Henriot)
<p>An Introduction from the Organisers to the Open Source &amp; EU Policy devroom.</p>
2/1/26
Open Source & EU Policy
UA2.118 (Henriot)
<p>European digital sovereignty is moving from slogan to strategy. Faced with dependencies and in line with its resilience goals, the EU increasingly turns to open source as a pillar of its technological autonomy. Yet the debate often stalls on the questions: Where is software “made”? Who “owns” the code? And can sovereignty be achieved simply by adopting European-labelled alternatives? - all questions that often are not compatible with how open source actually works, and potentially ...
2/1/26
Open Source & EU Policy
UA2.118 (Henriot)
<p>Europe’s IT landscape has long been heavily reliant on just a few large American tech providers, and this is equally true for the systems used in public administration. This dependence jeopardises the administrative services that underpin our states’ functioning. To counter this, Europe needs a tech stack that strengthens digital sovereignty at every level, from databases and virtualisation to operating systems and end-user applications. </p> <p>Various governments and governmental ...
2/1/26
Open Source & EU Policy
André Rebentisch
UA2.118 (Henriot)
<p>As it takes a village to raise a child, it takes a global open ecosystem to build a Euroshack. Inspired by the Frugal Manifesto, we envision the Euroshack as the first agile prototype of a truly open EuroStack: modest in form, ambitious in purpose. Grounded in pragmatism and powered by free and open software, the Euroshack avoids nationalist overtones and instead champions a scalable, dependable core. “Shack” is a humble name, but it reflects a bold mission: to secure digital sovereignty ...
2/1/26
Open Source & EU Policy
Rasmus Frey
UA2.118 (Henriot)
<h2>Abstract</h2> <p>Europe has bold ambitions for open source and digital sovereignty, yet most initiatives struggle to deliver meaningful change where it matters: at the level of local institutions. Despite strong strategies and political commitments, implementation stalls because the policy frameworks guiding European digital transformation ignore a simple truth. Europe is built on a multi-level governance system where local actors carry the responsibility for execution but lack the ...
2/1/26
Open Source & EU Policy
UA2.118 (Henriot)
<p>Roundtable discussion with policymakers and the community: how can the public procurement framework, that is currently being reformed, be used to achieve digital sovereignty goals? Open Source provides many answers to the questions digital sovereignty raises, but how can public procurers be empowered to buy more Open Source, what are their expectations, and what hurdles exist?</p>
2/1/26
Open Source & EU Policy
Emiel Brok
UA2.118 (Henriot)
<p>A Blueprint for Trusted European Digital Services</p> <p>The European Commission’s Cloud Sovereignty Framework (Version 1.2.1, Oct. 2025) is a critical blueprint for defining, assessing, and ensuring the sovereignty of cloud services used within the European Union. Born from initiatives like Gaia-X, CIGREF's Trusted Cloud Referential, and EU legislation (NIS2, DORA), this framework supplements security requirements with sovereignty-specific safeguards to reduce dependency on non-EU actors ...