The European Union is taking significant steps to restrict the processing of confidential EU data by American cloud providers. The European Commission is set to unveil a "Tech Sovereignty Package" on May 27, aimed at bolstering the bloc's strategic autonomy in critical digital sectors. This initiative comes amid rising tensions between EU officials and the U.S. administration, prompting discussions on diversifying away from dominant American cloud services.
The proposed measures focus on limiting access to sensitive government data stored on cloud platforms operated by companies outside of the EU. While the intention is not to impose a complete ban on foreign cloud usage within government structures, it seeks to regulate the use of such services based on the sensitivity of the data involved. The Commission is exploring which specific data should be housed in European cloud infrastructures.
Furthermore, there is a suggestion to establish a high-level sovereign cloud infrastructure for governmental organizations handling financial, judicial, and healthcare data. Private sector operations will not be affected by these new regulations.
The upcoming package, which must receive approval from all 27 EU member states, will include the Cloud and AI Development Act and the Chips Act 2.0. These laws are designed to promote sovereign solutions and European-made products in relevant fields. Additionally, the measures are expected to enhance the availability of sovereign cloud services, particularly through government procurement, and encourage more cloud and AI providers to enter the market.
Currently, EU government agencies often rely on foreign cloud platforms, primarily based in the U.S., due to the latter's dominance in this sector. Despite compliance with certain regulations, the growing unease about dependence on non-EU clouds has become increasingly pronounced, especially following a 2018 U.S. law allowing American authorities to request user data from U.S. companies, irrespective of where that data is stored.
In February 2026, the EU began discussing the creation of its own open alternatives to American cloud platforms, with plans to increase budgets for ensuring digital sovereignty. Acknowledging its vulnerability in the digital sector, the EU has already initiated projects to support sovereign cloud computing, including a recent €180 million tender for four European projects in this domain.
While some countries, like France, are already pursuing state-level import substitution in cloud services, American hyperscalers have long maintained a stronghold on the European market. Analysts suggest that significant changes in the current landscape may be unlikely, as many stakeholders have adjusted to the existing dynamics.
This shift indicates a strategic pivot for the EU towards enhancing its digital sovereignty, which could impact the competitive landscape for cloud service providers, particularly those based in the U.S.
Informational material. 18+.
