Poland to require ‘sovereignty test’ for tech buys as Tusk warns AI risks grow

Polish Prime Minister Donald Tusk confirmed this week that the government will impose a “sovereignty test” on major technology acquisitions, citing mounting concerns over foreign dependency in digital infrastructure and the accelerating risks posed by artificial intelligence. Speaking Tuesday at the European Financial Congress in Sopot, Tusk warned that Poland’s reliance on external tech systems has grown to a point where national security and strategic autonomy are at stake.

The new procurement rule will apply to significant government purchases of technology solutions, requiring officials to evaluate whether a given product or service could compromise Polish sovereignty. The test will assess factors such as data control, supply chain resilience, and the potential for foreign interference through embedded software or AI components. Tusk did not specify exact thresholds for the test but indicated it would cover both hardware and software deals involving “critical functions of the state.”

“The scale of our dependence on foreign digital infrastructure is no longer acceptable,” Tusk told the conference. “We must be able to ask: does this purchase strengthen or weaken our sovereignty? The answer cannot be assumed.”

The announcement comes as European governments grapple with growing geopolitical tensions and the rapid proliferation of AI tools that can collect, analyze, and exploit sensitive data. Tusk specifically highlighted the dual-use nature of artificial intelligence, noting that systems marketed for civilian purposes can easily be repurposed for surveillance, disinformation, or cyberattacks. He called for a coordinated European approach to AI governance but said Poland would act unilaterally if necessary.

Poland’s move follows similar steps by other EU member states, including France and Germany, which have tightened scrutiny of foreign tech vendors in recent months. The European Commission has also proposed a Cyber Resilience Act and a European Chips Act to reduce dependency on non-European suppliers. Tusk’s “sovereignty test” is expected to be formalized through an executive decree later this year, with full implementation targeted for early 2027.

Critics warn that the policy could slow down public sector digitalization and raise costs, but Tusk dismissed such concerns, arguing that short-term efficiency gains are not worth long-term vulnerability. The government will also publish a list of approved tech suppliers deemed to meet sovereignty criteria, though details on how companies will be vetted remain unclear.

“We are not closing the door on foreign technology,” Tusk said. “But from now on, the door will have a lock that only we control.”