18JUN

Poland proposes model-weights test for state contracts

2 min read

10:02UTC

Warsaw would score public technology tenders on architecture control, rights over AI model weights and vendor lock-in. No EU instrument names model weights at all.

← Back to Iran deal's first death tests the text Jump to analysis ↓

ConflictAssessed

Key takeaway

Warsaw would score bids on who owns the model weights, a question no EU law asks.

Donald Tusk's government proposed a mandatory technological sovereignty test on Tuesday 21 July for Polish public technology contracts above 5 million zloty, about $1.3m, and infrastructure projects above 15 million zloty.¹ Poland's Ministry of Digital Affairs would score bids against three criteria: state control over system architecture, ownership or access rights to artificial intelligence (AI) model weights, and freedom from vendor lock-in. The stated aim is domestic alternatives taking 20 to 30 per cent of the market.

This is a proposal, not a statute. It has not passed the Sejm, no commencement date has been set, and the criteria could be softened or dropped before any tender is scored against them. Poland's suppliers, most of them American, have several months in which to lobby.

Poland's model-weights criterion has no equivalent in the Cloud and AI Development Act (CADA), the EU cloud law adopted by the College of Commissioners in June after three slipped dates . CADA grades a contract by how far the buyer depends on the operator running the cloud, and says nothing whatever about who owns the weights of the model running on top of it. Weights are the trained parameters of a model, the numbers that determine how it behaves, so whoever holds them decides whether the system can be run, audited or retrained without the vendor's permission.

At 5 million zloty, a sovereignty score attaches to routine ministry procurement rather than to flagship national systems alone, which means a mid-sized case-management contract in Warsaw would be assessed on model-weight rights while the identical contract in Brussels would not. Warsaw drafted that clause in a fortnight for its own tenders. Whether it survives contact with the legislative process, and whether other member states copy the wording, decides if it becomes a European standard by imitation rather than by directive.

Deep Analysis

In plain English

Poland's government wants public bodies, ministries, local authorities, state agencies, to score technology and infrastructure contracts on how much control Poland actually keeps: who owns the software's architecture, who controls the AI model's underlying "weights" (the trained parameters that make an AI system work), and how hard it would be to switch suppliers later. Contracts above roughly £1.3 million for technology, or £3.9 million for infrastructure, would need to pass this test. It's stricter than the EU's own cloud sovereignty law, which doesn't ask about AI model ownership at all.

Deep Analysis

Root Causes

The proposal fills a specific gap Poland has identified in CADA: the EU's own cloud-sovereignty law, adopted 3 June after three slipped dates, grades cloud contracts by operator dependency but has no provision naming AI model-weight rights, leaving public bodies free to procure AI systems whose underlying models are controlled entirely by a non-EU vendor even when the hosting infrastructure passes CADA's test.

Warsaw's domestic-alternative target of 20-30% reflects a deliberate ceiling rather than an aspiration to full sovereignty; setting the bar below majority share avoids excluding foreign vendors outright while still creating a scored incentive domestic suppliers can compete for.

What could happen next?

Precedent
Poland's explicit inclusion of AI model-weight rights exceeds CADA's scope and could become a template other member states adopt to close the same gap.
Risk
Non-EU AI and cloud vendors may need to offer model-weight transparency or licensing concessions to remain eligible for Polish public contracts above the stated thresholds.

Sources:Forbes

Mentions:Donald Tusk →Poland's Ministry of Digital Affairs →Cloud and AI Development Act →College of Commissioners →Poland →Brussels →France →Germany →

First Reported In

Update #13 · The €890m fine that cost more than it collects

Forbes· 26 Jul 2026

Read original →

Causes and effects

This Event

Poland proposes model-weights test for state contracts

A national procurement rule reaches a dependency that Europe's cloud legislation leaves untouched, at thresholds low enough to catch routine ministry purchases.

Led to

Three enforcement checks came back empty

The bounded Poland check follows the 21 July sovereignty-test proposal.

Occurred 4 Aug 2026

Read story →

Different Perspectives

Lloyd's Market Association

War-risk underwriters price the Houthis' Red Sea attacks because the group announces its targets in advance, but the unclaimed Damietta drone gives insurers a hit with no author to price against. An attack nobody claims costs shipping more than one that is claimed, since premiums are set against a known pattern, not raw damage.

US Central Command

CENTCOM has announced no strike on Iran since resuming bombing on 30 July within hours of an IRGC salvo on Jordan, and centcom.mil did not respond to requests to confirm any pause. The command has gone quiet before while a larger operation was being weighed, so silence alone proves nothing about what it has or has not done.

Hengaw

Hengaw recorded at least 67 executions in Iran during July, of which the state acknowledged only eight, and reported the 1 August execution of protest detainee Arvin Kheirkhahan at Shahrud with no advance notice to his family. A family's first notice of a death sentence is now usually the instruction to collect a body.

Egypt

Egypt's government asked media on 2 August to report the Damietta attack accurately, named no author, and said no findings will be published before its own investigation concludes. Cairo holds the debris and jurisdiction over an attack on its own soil, and naming a culprit now would pull it into a dispute it has avoided for five months.

Iran's Foreign Ministry

Araghchi called the Hormuz talks with Oman final-stage on 2 August, four days after his own deputy rejected Oman's lane proposal, and denied the Damietta drone strike as an Israeli false flag while two Iranian officials privately claimed it for Tehran. Iran's public position now contradicts itself on both files at once.

Bahrain and Kuwait

Bahraini and Kuwaiti aircraft flew their own strikes on Iranian depots in July with Emirati air cover behind them, and Ynetnews reports some Gulf capitals wanted the 2 August strike to proceed rather than stop. States that have already taken fire see a closing window on Iranian weakness, not a reason to pause.