EU’s Digital Sovereignty Package Targets US Tech Dependence

On 15 June 2026 the European Commission introduced a sovereignty package that includes the Cloud and AI Development Act (Cada). The act creates a ranking for cloud providers handling public-sector data and a “strictest assurance level” that would bar U.S. firms from top contracts. It also proposes “datacentre acceleration zones” to speed approvals for new facilities.

The Guardian

The EU sources 80 % of its hardware and 70 % of its cloud services from non-EU providers. Dependence became acute when Trump administration sanctioned ICC judge Beti Hohler, cutting her access to U.S. platforms such as Apple, Amazon, Visa, Mastercard and PayPal. The case highlighted how U.S. political actions can disrupt European users of U.S. tech.

The Guardian

• European Commission – author of the package and Cada.

The Guardian

• U.S. big-tech firms – Amazon Web Services, Microsoft Azure, Google Cloud; European provider – OVHCloud (France).

The Guardian

• Beti Hohler – ICC judge sanctioned by the Trump administration; Pope Leo – AI encyclical author.

The Guardian

• EU reliance: >80 % of technology, 70 % of cloud services from non-EU providers.

The Guardian

• Strictest level covers only a narrow public-sector cloud segment, a small share of spend.

The Guardian

• Acceleration zones require approvals within 12 months, easing environmental reviews.

The Guardian

The European Commission frames the package as a safeguard against surveillance and to strengthen resilience. It argues that ranking cloud providers and fast-tracking datacentre approvals will raise domestic capacity and lower vulnerability. The act aims to align AI deployment with EU policy goals, referencing AI visions promoted by U.S. firms.

The Guardian

Analysts note that the strictest assurance level covers only a limited portion of public-sector cloud spending, limiting impact. Delegating enforcement to member states may cause weak implementation, echoing underenforcement in Ireland. The AI provisions adopt a U.S. view, treating AI as an end without rigorous risk assessment. Acceleration zones risk undermining transparency, accountability and environmental standards, and could entrench U.S. hyperscalers by omitting size or nationality criteria.

The Guardian

The package does not detail enforcement mechanisms for the provider ranking or provide metrics to gauge reductions in U.S. tech reliance. Criteria for datacentre eligibility remain vague, leaving uncertainty about how sustainability concerns will be addressed.

The Guardian

• “cultivating resistance” — Trump administration

The Guardian

• “technological development advances without a corresponding ethical and social progress, the result may be an increase in means without a growth in humanity”. — Pope Leo

The Guardian

Member states must adopt the ranking criteria and establish acceleration zones within twelve months. The Commission will monitor compliance and report on progress in reducing U.S. cloud reliance, while EU legislators consider AI and environmental safeguards for datacentres.

The Guardian