EU’s Cloud and AI Development Act Faces Varied Reactions
Poinews.com – The European Commission has introduced a new initiative, the Cloud and AI Development Act (CADA), designed to strengthen the European cloud and artificial intelligence sectors. The legislation targets three core areas: fostering research and innovation, enhancing data centre capacity, and creating a structured autonomy framework. While the plan aims to redefine the continent’s digital infrastructure and public sector operations, responses from industry stakeholders have been divided.
Industry Perspectives on Sovereignty Requirements
Some groups have raised concerns about CADA’s approach to digital sovereignty. The CCIA Europe, for instance, argues that the act could unfairly disadvantage non-EU companies by requiring member states to prioritize certain sovereignty levels that foreign vendors might struggle to fulfill. Polish legal expert Mikolaj Barcenciewicz emphasizes the need for a flexible, risk-based system, suggesting that member states should retain autonomy in decision-making rather than adopting a one-size-fits-all model.
“The European digital sovereignty goals must be paired with clearer simplification and better business conditions to ensure a solid return on investment.”
Swedish MEP Jörgen Warborn, who recently shared his views on LinkedIn, supports this stance. He highlights that while national security applications should be safeguarded under strict EU control, less critical sectors should remain open to foreign investment. “A large portion of global wealth is outside the EU,” he notes, “so the bloc should focus on attracting it, not restricting its flow.”
Controversies Over Centralization and Implementation
Finnish MEP Aura Salla, however, advocates for a more centralized strategy, particularly in evaluating technological dependencies and risks. She believes member states should streamline testing processes to ensure uniform standards. Meanwhile, German software firm Nextcloud has criticized the current proposal as insufficient, urging its expansion to include private sector participation. The company suggests that the act’s scope should be broadened to foster broader industry collaboration.
Compliance Challenges and Time Constraints
CADA’s Title III outlines mechanisms to accelerate data centre growth, including designated acceleration zones and strategic projects. Each member state is required to identify at least one zone within six months of the law’s enactment, incorporating urban planning considerations. These zones, along with individually approved projects, qualify for expedited permit processes, capped at 12 months. Yet, the compliance requirements are stringent, demanding standardized sustainability metrics and close oversight of resource allocation to prevent hoarding or market distortions.
The tight deadlines add pressure to an already complex process. With only a few certified builders available and lengthy construction timelines due to physical and regulatory hurdles, the 12-month permit target may prove difficult to achieve. This could leave the act’s stated goal as a symbolic benchmark rather than a practical achievement. Title IV further tightens procurement rules, categorizing cloud services into four assurance levels. Level 1 allows third-country ownership, while Level 3 mandates high sovereignty and national security measures, restricting data usage for foreign AI training.
