EU Plans New Rules for Foreign Cloud Providers Handling Sensitive Data
The EU is preparing new rules to limit public-sector use of non-EU cloud providers for sensitive data as part of a broader push for digital and cloud sovereignty.
The EU is preparing new rules to limit public-sector use of non-EU cloud providers for sensitive data as part of a broader push for digital and cloud sovereignty.
EURO‑3C aims to strengthen EU digital sovereignty by federating national cloud and AI infrastructure under European governance, reducing reliance on US and Chinese tech providers.
European sovereign cloud spending is surging as legal and geopolitical risks linked to U.S. providers push EU organizations to prioritize digital sovereignty and regulatory certainty.
The Commission is probing AWS and Azure under the DMA and assessing cloud market practices to determine gatekeeper status and potential updates to EU obligations on interoperability, data access, and fair contracts.
CISPE warns the EU Cloud Sovereignty Framework’s scoring model may favor US hyperscalers over local providers, while the EC defends it as measurable and procurement-ready amid CLOUD Act constraints.
The EU Data Act now mandates user data access for IoT, bans unfair B2B data terms, enforces cloud switching and interoperability, enables B2G access, and sets smart contract safeguards.
Google waives inter-cloud data transfer fees in the EU and UK ahead of the EU Data Act, outpacing AWS and Microsoft and lowering costs for multicloud portability and switching.