Skip to content
Briefings are running a touch slower this week while we rebuild the foundations.See roadmap
European Tech Sovereignty
27MAY

Sanchez shuts down Pentagon email from Cyprus

3 min read
15:19UTC

At the EU informal leaders' summit in Cyprus, Pedro Sanchez dismissed the Pentagon leak as non-official noise. Article 42.7 of the EU Treaty was already on the agenda.

TechnologyDeveloping
Key takeaway

Spain classes the Pentagon leak as unofficial; Article 42.7 is the escalation path if Washington presses.

Spanish Prime Minister Pedro Sanchez responded to the Pentagon email leak on Friday 24 April from the EU informal leaders' summit in Cyprus: "We do not work on emails, we work on official documents and positions taken in this case by the United States Government" 1. Spain maintains "absolute collaboration with the allies, but always within the framework of international legality." The reference to legality is the diplomatic vocabulary for treating the Pentagon memo as unofficial noise.

The summit convened 26 heads of government in the same building when the leak surfaced. Cypriot President Nikos Christodoulides had already tabled Article 42.7 of the EU treaty, the bloc's mutual-defence clause, on an agenda alongside the Northwood Hormuz track , Ukraine and energy security. Article 42.7 has been invoked only once, by France after the 2015 Paris attacks. Putting it back on the summit table converts the leak from a Spanish bilateral issue into a potential collective-defence discussion.

Calling the memo "emails" rather than a Pentagon position denies its standing without triggering an escalation, and Sanchez's reference to "the framework of international legality" pre-positions the legal vocabulary Spain would reach for if the Pentagon memo were converted to policy. Emmanuel Macron and Keir Starmer used the same legality framing when declining the Iran-campaign coalition, the refusal that the Pentagon memo is now written to punish.

The decision point is whether Cyprus produces an Article 42.7 working group on allied-flagged shipping outside the US two-tier ceasefire bubble, or whether the summit closes with the Sanchez line as the collective position. The former hardens the memo leak into a structural alliance dispute; the latter lets Washington test a second leaked memo against weakened European cohesion. NATO Secretary General Mark Rutte's 9 April "paper tiger" gloss of Trump's view sits between the two possibilities.

Deep Analysis

In plain English

While 26 European leaders were meeting in Cyprus, Reuters broke the Pentagon memo story naming Spain as the primary target. Pedro Sanchez responded from the same Cyprus summit building, telling reporters Spain only acts on official US government documents, not leaked internal emails. At the same meeting, Cyprus put a little-used European Union treaty clause on the agenda: Article 42.7, which says if one EU country is attacked, others must help. It has only ever been used once before, by France after the 2015 Paris attacks. Cyprus raising it now suggests some EU countries are asking whether Iran's attacks on European-flagged ships in the Gulf count as an attack that the whole EU should respond to.

What could happen next?
  • Risk

    If Cyprus succeeds in getting an Article 42.7 working group established for allied-flagged shipping, the EU acquires a collective-defence argument for shipping protection that bypasses the NATO ABO-rights dispute the Pentagon memo triggered.

First Reported In

Update #78 · Allies flagged, adversaries listed, nothing signed

Democrata· 24 Apr 2026
Read original
Causes and effects
This Event
Sanchez shuts down Pentagon email from Cyprus
Europe's diplomatic response sets the test for whether the Pentagon memo becomes policy or deniable drafting.
Different Perspectives
ASML / European tech industry
ASML / European tech industry
ASML's Q2 2026 guidance came in €300m below consensus as China DUV revenue collapsed 17 percentage points; the company's CEO wrote US export-control outcomes directly into 2026 guidance. European tech firms named on the USTR retaliation list alongside SAP, Siemens and Spotify face the same calculus: US trade exposure constrains what Brussels can legislate on their behalf.
France / Anne Le Henanff
France / Anne Le Henanff
Le Henanff chaired the G7 Digital Ministerial at Bercy on 29 May with CAIDA off the agenda, pivoting France's presidency to AI safety principles it had not designed the week around. France backs CAIDA but cannot override Berlin's tariff calculus, so the ministerial produced no new French-led commitment.
Germany / Federal government
Germany / Federal government
Berlin's automotive sector faces up to $200bn in threatened US tariffs, a commercial exposure that dwarfs any benefit CAIDA's public-sector cloud rules would deliver to German digital firms. Federal silence inside the College of Commissioners functions as a block under consensus adoption rules without requiring a formal veto.
USTR / Ambassador Andrew Puzder
USTR / Ambassador Andrew Puzder
Puzder's public warning on 25 May that CAIDA is inconsistent with the EU-US trade framework was the first time Washington made its bilateral pressure visible before a Commission adoption vote rather than after. The USTR Section 301 determination on 24 July provides the enforcement backstop.
European Commission / Henna Virkkunen
European Commission / Henna Virkkunen
Virkkunen framed the third slip as a procedural delay in finalising a 400-page text without addressing Puzder's trade-framework red line publicly. The Commission enforces existing law against Google while losing the legislative timeline on CAIDA, exposing an asymmetric position: enforcement holds; new sovereignty legislation does not.
OpenForum Europe / open-source community
OpenForum Europe / open-source community
The EUR 350m Sovereign Tech Fund has no Commission host, no budget line, and no commissioner's name attached six weeks after the April conference, while Germany is already paying maintainers to staff international standards bodies. The CRA open-source guidance resolves contributor liability but leaves the financial-donations grey area open with the 11 September reporting clock running.