7MAY

Commission says DMA is fit, eyes cloud

2 min read

10:13UTC

The European Commission published its first Digital Markets Act review on Tuesday 28 April, finding the law fit for purpose and naming cloud services and AI as priorities for future enforcement expansion. The consultation received 450-plus responses.

← Back to CISPE moves first; Brussels misses again Jump to analysis ↓

TechnologyDeveloping

Key takeaway

the Commission's first DMA review names cloud and AI as the next enforcement priority.

The European Commission published its first Digital Markets Act (DMA) Review Report, filed as COM(2026) 178, on Tuesday 28 April⁠¹. The report concludes the law is "fit for purpose" and identifies cloud services and artificial intelligence as critical priorities for future enforcement expansion. The consultation drew 450-plus responses.

The review lands on the back of an active enforcement run. the Commission served preliminary DMA measures on Alphabet over Article 6(11) on 16 April, and earlier this year fined Apple €500 million, Meta €200 million under the DMA, and X €120 million under the Digital Services Act. It opened DMA cloud gatekeeper probes against AWS and Azure last autumn, the same probes that triggered the United States' Section 301 counter-response. Naming cloud and AI as the next expansion priorities does not commit the Commission to designating a cloud gatekeeper, but it is the closest thing to a public statement of direction the Commission has issued since the package slipped.

Deep Analysis

In plain English

The Digital Markets Act (DMA) is an EU law that forces large technology companies like Apple, Google, Meta, and Amazon to play by fairer rules, for example by letting users install apps from outside official app stores, or by requiring companies to share data with rivals. On 28 April 2026, the European Commission published its first formal review of the Act, concluding it is working as intended. More than 450 organisations had submitted comments. the Commission also said it wants to extend the Act's powers to cover cloud services and AI companies in future, which would bring more of the technology sector under these rules.

Source Landscape

This story draws on neutral-leaning sources from Belgium

Belgium

Primary parallel: The European Commission's 2020 review of the ePrivacy Directive found it 'fit for purpose' while simultaneously identifying enforcement gaps that prevented it from achieving its stated objectives. The review produced a recast proposal (ePrivacy Regulation) that remained blocked in Council through 2025. The DMA Review follows the same diagnostic path: confirming adequacy while identifying conditions that make adequacy insufficient.

Counter-parallel: The 2022 review of the EU Platform-to-Business Regulation found it fit for purpose and produced no legislative follow-on; the identified gaps were absorbed into the DMA's broader obligations rather than generating a standalone revision. The DMA Review's cloud and AI findings may follow this aggregation route into existing frameworks rather than triggering new legislation.

Consensus view: Friends of Europe's Dharmendra Kanani argues the 'fit for purpose' finding is a political baseline, not an operational verdict: the Review Report explicitly notes that cloud and AI enforcement requires additional Commission investigatory resources that were not in the 2023 DMA staffing plan, meaning the Act is legally adequate but practically under-resourced for the sectors it most needs to cover.

Counter-view: IISS's Franz-Stefan Gady, assessing the national-security implications of cloud enforcement expansion, contends that extending DMA obligations to military and dual-use cloud infrastructure would be counterproductive, because the Act's interoperability requirements would force security-cleared cloud environments to create API access points that European intelligence services consider operationally unsafe.

The 450-plus consultation responses likely include multiple defence-ministry submissions on exactly this point.

Key tension: Whether the Commission can expand DMA enforcement to cover sovereign cloud and AI without creating a carve-out regime that replicates the regulatory fragmentation the Act was designed to eliminate.

Sources:European Commission

Mentions:European Commission →Google →IISS →Digital Markets Act →Meta →United States →Section 301 →Alphabet →Azure →Digital Services Act →Apple →Amazon →

First Reported In

Update #4 · CISPE moves first; Brussels misses again

European Commission· 7 May 2026

Read original →

Different Perspectives

ESMC (TSMC-majority joint venture)

ESMC's president said construction remains on schedule after the Dresden fab's topping-out ceremony on 14 September, reported by Focus Taiwan with first process equipment still targeted for the second half of 2027. No first-party ESMC or TSMC statement independently confirms the claim, and the fab remains 70% TSMC-owned inside a project Europe cites as its semiconductor sovereignty case.

Civo

Civo sold out its Navigate London sovereignty conference on 22 September, drawing about 800 attendees including a sitting MP, a former defence procurement minister and sponsors led by Nokia. Companies House confirms chief executive Mark Boost as Civo's sole person with significant control, British and UK-resident, which answers the ownership question the conference itself is arguing matters.

United States Trade Representative

USTR opened its 2027 National Trade Estimate comment window on 14 September, naming the EU among markets with restrictive technology requirements and inviting submissions on cross-border data rules. The window follows Trump's 24 July Section 301 order into EU digital rules by seven weeks, and unused comments are kept, in USTR's own wording, for future negotiations.

Cohere

Cohere published the deal on 16 September without naming a regulator, running the merged company globally under its own brand from dual Toronto and Berlin headquarters. It pledges the combined company will deliver sovereign AI on STACKIT, the Schwarz Group's German platform, aimed at government buyers weighing that offer against Berlin's own anchor-customer signal.

Germany (Federal Government)

Digital Minister Karsten Wildberger called the Cohere talks "a very strong signal" and signalled Berlin's readiness to become an anchor customer, now its main lever since equity sits with Cohere. The German side secured a co-headquarters and two Cohere C-suite seats, but the protective-rights terms it pressed for in July remain undisclosed.

Poland

Poland leads a self-announced AI Gigafactory consortium with a EUR 100 million phase-one commitment, matched by Czechia and joined by Hungary at EUR 25 million. EuroHPC has confirmed no consortium for the call closing 12 November, so the bloc exists only in national announcements so far.