This article, originally published in Lawfare, is the first legal analysis to appear in the United States of the European Union’s Cloud and AI Development Act (CADA), which was proposed by the European Commission on June 3, 2026. CADA is part of the EU’s Technological Sovereignty Package, a sprawling and ambitious compendium of measures intended to strengthen Europe’s capacity in semiconductors, artificial intelligence, clouds services, and open source software.
CADA is, in significant part, an effort to dethrone US cloud service companies’ dominance of the European market. Foreign companies seeking to bid on contracts to manage sensitive European government data could be excluded from doing so as a result of their obligations to adhere to foreign sanctions and government access to data laws. The article assesses the difficulties cloud service providers would face due to these proposed new restrictions.
To read the article, click here.
* * *
These statements are attributable only to the author, and their publication here does not necessarily reflect the view of the Cross-Border Data Forum or any participating individuals or organizations.
