The Spanish government, through the Ministry of Digital Transformation, had awarded a €10 million contract to Telefónica to upgrade the RedIRIS network, which connects universities, research institutes, and parts of the Ministry of Defense. This upgrade, which was to use Huawei equipment, was deemed urgent to support new digital services and supercomputing projects. The government’s decision to reverse course for “reasons of digital strategy and strategic autonomy” marks a shift away from its prior policy. The cancellation highlights a growing awareness of the geopolitical risks associated with using technology from vendors that are deemed to be “high-risk,” particularly in critical national infrastructure.
The cancellation of the contract comes amid increasing pressure and scrutiny from Spain’s international partners, particularly the United States. Allies have voiced alarm over the significant presence of Huawei equipment within Spanish telecommunications infrastructure, including the core of Telefónica’s 5G network. In July, chairs of the U.S. House and Senate Intelligence panels raised concerns after revelations that Spain’s wiretap system is underpinned by Huawei technology, prompting a call for a review of intelligence sharing between the two countries. This external pressure likely played a role in the government’s decision to cancel the contract, as Madrid seeks to align its digital security strategy with its key defense and intelligence allies.
The fears surrounding the use of Huawei technology are rooted in the context of Beijing’s offensive cyber espionage activities and China’s 2017 National Intelligence Law. This law could theoretically compel Chinese companies to assist the state in intelligence gathering, raising concerns that their equipment could be used as a backdoor for cyberattacks or surveillance. While Huawei has consistently denied these claims, the potential risks have led many Western nations, including the U.S. and U.K., to restrict or ban the company from their 5G networks. The cancellation of the RedIRIS contract shows Spain is now taking these geopolitical considerations more seriously, moving closer to the cybersecurity stances of other NATO and EU member states.
Spain’s approach to high-risk technology vendors has previously been seen as a significant outlier among its NATO and EU allies. While the EU’s 5G Cybersecurity Toolbox recommends limiting or excluding high-risk suppliers, Spain has adopted a case-by-case approach. This has led to inconsistent policies, such as restricting Huawei from some public 5G projects while simultaneously approving its servers to store sensitive police wiretap data. This lack of a clear, unified policy has contrasted sharply with the more restrictive approaches of countries like the UK, the Netherlands, and Poland. The cancellation of the contract could signal a move toward a more defined and cohesive national policy on digital infrastructure security.
The political landscape in Spain, however, presents a complex picture. Prime Minister Pedro Sánchez has been one of the most supportive EU leaders of Huawei, and the company is a major technology contractor and employer in Spain, with research facilities in Madrid. This economic relationship has made it politically difficult for the government to impose blanket restrictions. Despite this, the cancellation of the RedIRIS contract suggests that national security and strategic autonomy concerns, amplified by pressure from key allies, are beginning to take precedence over economic and political convenience. The move indicates that Madrid is recalibrating its approach to digital security in a world where technology and geopolitics are increasingly intertwined.
Reference:
