Skip to content
You can now search across every topic, entity and event.What's new
European Tech Sovereignty
18JUN

Bruegel puts the cloud law at 86bn euros

3 min read
09:28UTC

The Brussels think-tank Bruegel put the migration of public-sector workloads to sovereign-level cloud at up to 86bn euros, using the Commission's own impact assessment.

← Back to EU chip share slips to 9% as law takes holdJump to analysis ↓
TechnologyDeveloping
Key takeaway

The financial case against the cloud law comes from inside Brussels, not from Washington.

The Brussels think-tank Bruegel published a "First Glance" analysis on Thursday 11 June that put a number on CADA The Commission had not advertised. The Commission's own impact assessment, Bruegel found, costs the migration of public-sector workloads to sovereign-level cloud at up to 86bn euros, on an assumed price premium of just 5% that Bruegel calls unrealistic 1.

That figure dwarfs the rest of the sovereignty budget. The 4.12bn euro AI Gigafactories call due in July and the 2bn euro open-source strategy together come to under a tenth of it.

Bruegel's deeper objection is structural: CADA's test for the highest assurance levels turns on a provider's nationality, not on technical safeguards, and the author argues origin is a poor proxy for security. CADA was adopted on 3 June as the package's cloud law ; the critique lands while the ink is barely dry.

The source matters as much as the sum. This is not US industry lobbying against a Buy-European tilt. It is a centre, Brussels-embedded institution telling The Commission its own figures do not hold.

Deep Analysis

In plain English

A Brussels think-tank called Bruegel published an analysis on 11 June saying the EU's new cloud law would cost far more than the EU admitted. The EU's Cloud and AI Development Act, known as CADA, requires government agencies to switch from US cloud services to European-owned ones for their most sensitive data. Bruegel found that the EU's own paperwork puts the bill for this switch at up to 86bn euros. To put that in perspective: the EU's plan to build big new AI computing centres costs about 4bn euros. The migration bill alone could be twenty times that. Bruegel also argues the law uses the wrong test: it checks where a company is based rather than how secure its actual technology is. A European-owned cloud provider with poor security would qualify; a US provider with strong technical safeguards would not.

Deep Analysis
Root Causes

CADA's 5% price-premium assumption in the Commission's impact assessment was set before any large-scale public-sector migration to sovereign-tier services had been completed.

The Netherlands' award of the Health Data Hub to Scaleway on 23 April 2026 at roughly €180m for millions of citizens' records is the closest comparable; per-record and per-workload pricing from a real migration was not published before CADA's adoption. The Commission worked with a hypothetical premium, not empirical migration data.

The deeper structural issue is that CADA's adoption was delayed three consecutive times (March, April, 27 May before 3 June) in part due to US trade pressure, and the impact assessment was not revised to incorporate more conservative cost scenarios during those delays.

Escalation

Bruegel's 86bn euro figure becomes the contested number in any CADA trilogue review. The Commission adopted CADA on 3 June; the text is in trilogue between Commission, Parliament and Council. The analysis, coming from a Brussels-embedded institution rather than a US industry lobby, is harder for the Commission to dismiss and is likely to be cited by Council delegations seeking to narrow CADA's scope or adjust the assurance-tier thresholds during trilogue.

What could happen next?
  • Risk

    If the trilogue accepts a narrower assurance-tier scope in response to the cost critique, CADA's operational effect on actual public-sector procurement could be smaller than the Commission framed at adoption.

    Medium term · Suggested
  • Consequence

    The 5% price-premium assumption will need empirical grounding from real migrations, such as the Netherlands' Scaleway Health Data Hub contract, before the Commission can defend its impact assessment in trilogue.

    Short term · Assessed
  • Meaning

    A cost critique sourced to the Commission's own impact assessment, published by a Commission-adjacent institution eight days after CADA adoption, structurally weakens the political case for the law before any member state has had to budget for compliance.

    Short term · Assessed
Sources:Bruegel
Mentions:Bruegel →Cloud and AI Development Act →European Commission →AI Gigafactories →Ursula von der Leyen →GDPR →Francisco Mingorance →CLOUD Act →Brussels →CISPE →Australia →
First Reported In

Update #9 · EU chip share slips to 9% as law takes hold

Bruegel· 18 Jun 2026
Read original →
Causes and effects
This Event
Bruegel puts the cloud law at 86bn euros
The figure dwarfs the rest of the sovereignty budget and the critique carries weight because of where it comes from. This is a centre, Brussels-embedded institution telling the Commission its own sums do not hold, not US industry lobbying against a Buy-European tilt.
Led to
Bruegel says EU sovereignty mimics rivals
Bruegel's CADA cost estimate of up to €86bn is the analytical context for Mariniello's broader mimicry critique of the sovereignty package.
Occurred 1 Jun 2026
Read story →
Different Perspectives
China's Ministry of Commerce
China's Ministry of Commerce
Spokesperson He Yadong said on 16 July that Beijing and the Netherlands should let firms settle the Nexperia dispute through consultation, after a Dutch ministerial visit to Beijing. The conciliatory tone contrasts with the confrontational US trade response to the same fortnight's DMA enforcement.
Samsung Electronics
Samsung Electronics
Samsung entered talks reported 22 July to invest up to €1 billion in Mistral AI, part of a round valuing the French lab at roughly €20 billion alongside EQT, Novo Holdings and Santander. The Korean conglomerate, not an EU financing instrument, is positioned to anchor Europe's flagship AI lab.
Poland (Tusk government)
Poland (Tusk government)
Donald Tusk's government proposed a mandatory sovereignty test on 21 July for state technology contracts above 5 million zloty, scoring bids on AI model-weight rights and vendor lock-in rather than waiting for an EU-wide procurement rule. The threshold targets a 20-30 per cent domestic-alternative share.
United States administration
United States administration
Donald Trump ordered a Section 301 investigation into EU digital-enforcement practices on 24 July, a day after USTR's Jamieson Greer said the Google fine created massive uncertainty for US exports, noting Google's cumulative EU fines already exceed 2 per cent of the bloc's budget.
Ecosia
Ecosia
Ecosia said the 16 July FRAND ranking-data order would take it from answering two-thirds of queries to all of them once the obligation activates in January 2027. The Berlin-based challenger has not called the enforcement package adequate, only workable if Google complies rather than appeals.
European Commission
European Commission
Teresa Ribera and Henna Virkkunen announced the €890m fine on 23 July, saying products should succeed on merit, not platform ownership; four days earlier a separate Article 6(7) order compelled Android interoperability. The Commission expects both to hold on appeal after the Court of Justice upheld its earlier €4.1bn Android fine on 2 July.