EU proposes Cloud and AI Development Act to mandate digital sovereignty

CADA shifts the EU’s tech strategy from political ambition to hard infrastructure law, likely forcing a massive realignment of public-sector procurement by late 2027. For the streaming and AI ecosystem, this creates a potential "de facto tariff" on US hyperscalers if strict ownership-based definitions are adopted. This regulatory shift arrives during a global compute supercycle, where AI is projected to consume 86% of leading-edge output by 2027. If sovereign-certified providers cannot match the networking and efficiency of foreign hyperscalers, European organizations may face higher costs and reduced access to top-tier GPUs. Watch for whether the final text includes "effective control" criteria, which would explicitly exclude many US-controlled joint ventures from sensitive contracts.

The European Commission formally tabled the CADA legislative proposal on June 3, 2026, marking a pivotal moment for the European Technological Sovereignty Package. Per Wilson Sonsini (June 2026), the act is designed to function alongside the existing AI Act and Data Act, specifically targeting the infrastructure layer by mandating "on-demand remote access to scalable and shareable computing resources" that are free from foreign extraterritorial influence. This move responds to a steep decline in European cloud providers' market share, which fell from 26% in 2017 to approximately 10% by 2020.

Industry group CISPE has pushed for even more aggressive measures within the act. According to a June 2026 Telecompaper report, CISPE criticized early drafts for not requiring public authorities to actively check for European alternatives before opting for non-EU providers. They have urged the Commission to adopt a "Buy European – Ensure Resilience – or Explain" principle in procurement. However, researchers at Interface (June 2026) warn that the relationship between sovereignty and competitiveness remains the package's primary unresolved tension, noting that strict exclusion of US hyperscalers could inadvertently hamper the innovation speed of European AI startups dependent on high-performance infrastructure.

The act’s emphasis on "AI factories" and "AI gigafactories" aligns with broader EU industrial goals. Per Computerworld (June 2026), the Commission aims to create four specific assurance levels, with Level 4 requiring full transparency and control over the software supply chain. While proponents argue this standardizes "sovereign cloud" to prevent marketing-driven "sovereignty washing," critics point to a September 2024 Ontario court ruling against OVHcloud as evidence that even EU-headquartered providers cannot always escape foreign data production orders, complicating the legal foundations of the proposed autonomy framework.