EU unveils Cloud and AI Development Act: 320 billion euros to counter dependency on US tech giants - four-tier sovereignty model aims to protect European data
What it really says
On June 3, 2026, the European Commission presented the Cloud and AI Development Act (CADA) as part of a comprehensive European Technological Sovereignty Package. The law aims to at least triple the EU's data center capacity within the next five to seven years and fully meet the needs of European businesses and public administrations by 2035 using domestic infrastructure. At the core of the proposal is a four-tier sovereignty model for the public sector: Level 3 requires EU ownership and control of providers, Level 4 demands full transparency over the software supply chain and the exclusion of third-country interference. Stricter requirements apply to cloud contracts in critical sectors such as banking, energy, and healthcare. Member states will be required to conduct sovereignty risk assessments for every administrative software in use. The broader package includes the Chips Act 2.0, a new open-source strategy with preference rules in public procurement, and a strategic roadmap for digitalization and AI in the energy sector. The investment target is 320 billion euros through 2036. Currently, the US hyperscalers Amazon Web Services, Microsoft Azure, and Google Cloud control approximately 70 percent of the European cloud market.
Our assessment
CADA represents the EU's most concrete response to digital dependency on US tech corporations and deserves a cautiously positive evaluation. The analysis of the current situation is accurate: when 70 percent of European cloud infrastructure is operated by three American companies, this constitutes a strategic risk, particularly given the US CLOUD Act, which theoretically grants American authorities access to data stored by US companies even when servers are physically located in Europe. The four-tier sovereignty model is a pragmatic approach: it does not mandate a complete exclusion of American providers but creates transparent criteria that enable public procurement officials to make informed decisions. At the same time, 320 billion euros is an ambitious target that must be measured against reality. Europe's previous attempts to build its own cloud champions, such as Gaia-X, have not changed the market dominance of US providers. The crucial difference: CADA does not rely on voluntary industry cooperation but on binding procurement rules for the public sector, which is a massive market in Europe. The combination with the Chips Act 2.0 and open-source requirements shows that the Commission is taking a holistic approach. Whether the law achieves its intended effect depends on the speed of implementation and the willingness of member states to actually restructure their procurement practices.
Relevance for Germany
For Germany, CADA is of central importance for several reasons. First, Germany is the EU's largest cloud market and therefore most affected by the dependency: German companies, government agencies, and hospitals rely heavily on AWS, Azure, and Google Cloud. The sovereignty risk assessments that CADA mandates for administrative software will fundamentally transform Germany's public IT landscape. Second, Germany faces the question of how to integrate its own cloud strategy and Gaia-X experiences into the new EU framework. The EU Representation in Germany explicitly presented the package on June 3 as strengthening technological sovereignty. Third, the open-source preference rule in public procurement directly affects German public administration, which uses proprietary American software in many areas. CADA could accelerate the long-demanded transition to open standards and European alternatives. Fourth, German cloud providers such as IONOS, Open Telekom Cloud, and SAP stand to benefit from the new rules, as they can more easily meet the sovereignty requirements of the highest tiers than their American competitors.
Fact check
The primary source is the European Commission's official page on digital-strategy.ec.europa.eu, where both the policy page and the full legislative proposal are published. The EU Representation in Germany confirmed the package in a dedicated press release on June 3, 2026. The figure of 70 percent US market share in the European cloud market is consistently cited by the Commission itself, borncity.com, boerse-express.com, and it-boltwise.de. The investment target of 320 billion euros through 2036 comes from blogspan.net reporting and is supported by Commission documents. The four-tier sovereignty model is taken directly from the CADA proposal. The CCIA, a US technology industry trade association, has already criticized the proposal as discriminatory, underscoring the law's significance.
Source
- • https://digital-strategy.ec.europa.eu/en/policies/cloud-and-ai-development-act
- • https://digital-strategy.ec.europa.eu/en/library/proposal-cloud-and-ai-development-act-cada
- • https://germany.representation.ec.europa.eu/news/chips-cloud-open-source-und-ki-eu-kommission-legt-paket-zur-technologischen-souveranitat-vor-2026-06-03_de
- • https://borncity.com/news/cloud-and-ai-development-act-eu-bricht-us-dominanz-auf/