Cloud Development

• On 3 June 2026, the European Commission proposed a new Regulation to establish a framework for strengthening the EU Cloud and AI Development Act. • The proposal mandates that cloud computing providers obtain a European cybersecurity certificate with at least a “high” assurance level. • Providers must maintain effective control over all software components and prove that no third-country entities exercise control over the design, development, or maintenance of such software.

• The European Commission has proposed the Cloud and AI Development Act (CADA) to establish a structured sovereignty framework for cloud and AI infrastructure. • The act introduces a four-tier classification system, ranging from Level 1 (self-assessment and cybersecurity) to Level 4 (full EU ownership, EU-cleared personnel, and strict data localization). • This initiative matters as it seeks to reduce reliance on non-EU providers by ensuring critical AI inference data remains within the union and is subject to national audits.

• On 3 June 2026, the European Commission proposed a new Regulation to establish a framework for strengthening the EU Cloud and AI Development Act. • The proposal mandates that cloud computing providers obtain a European cybersecurity certificate with at least a “high” assurance level. • Providers must maintain effective control over all software components and prove that no third-country entities exercise control over the design, development, or maintenance of such software.

• The European Commission has proposed the Cloud and AI Development Act, which introduces sovereignty tiers for cloud providers to reduce reliance on U.S. tech dominance. • Major U.S. firms, including Amazon, Google, and Microsoft, face potential hurdles in securing sensitive government data contracts due to conflicts with the U.S. Cloud Act. • The legislation aims to triple the EU's data center capacity and prioritize the use of EU-developed hardware and software within strategic sectors.