Skip to content
You can now search across every topic, entity and event.What's new
Iran Conflict 2026
3SEP

Poland proposes model-weights test for state contracts

2 min read
16:40UTC

Warsaw would score public technology tenders on architecture control, rights over AI model weights and vendor lock-in. No EU instrument names model weights at all.

ConflictAssessed
Key takeaway

Warsaw would score bids on who owns the model weights, a question no EU law asks.

Donald Tusk's government proposed a mandatory technological sovereignty test on Tuesday 21 July for Polish public technology contracts above 5 million zloty, about $1.3m, and infrastructure projects above 15 million zloty.1 Poland's Ministry of Digital Affairs would score bids against three criteria: state control over system architecture, ownership or access rights to artificial intelligence (AI) model weights, and freedom from vendor lock-in. The stated aim is domestic alternatives taking 20 to 30 per cent of the market.

This is a proposal, not a statute. It has not passed the Sejm, no commencement date has been set, and the criteria could be softened or dropped before any tender is scored against them. Poland's suppliers, most of them American, have several months in which to lobby.

Poland's model-weights criterion has no equivalent in the Cloud and AI Development Act (CADA), the EU cloud law adopted by the College of Commissioners in June after three slipped dates . CADA grades a contract by how far the buyer depends on the operator running the cloud, and says nothing whatever about who owns the weights of the model running on top of it. Weights are the trained parameters of a model, the numbers that determine how it behaves, so whoever holds them decides whether the system can be run, audited or retrained without the vendor's permission.

At 5 million zloty, a sovereignty score attaches to routine ministry procurement rather than to flagship national systems alone, which means a mid-sized case-management contract in Warsaw would be assessed on model-weight rights while the identical contract in Brussels would not. Warsaw drafted that clause in a fortnight for its own tenders. Whether it survives contact with the legislative process, and whether other member states copy the wording, decides if it becomes a European standard by imitation rather than by directive.

Deep Analysis

In plain English

Poland's government wants public bodies, ministries, local authorities, state agencies, to score technology and infrastructure contracts on how much control Poland actually keeps: who owns the software's architecture, who controls the AI model's underlying "weights" (the trained parameters that make an AI system work), and how hard it would be to switch suppliers later. Contracts above roughly £1.3 million for technology, or £3.9 million for infrastructure, would need to pass this test. It's stricter than the EU's own cloud sovereignty law, which doesn't ask about AI model ownership at all.

Deep Analysis
Root Causes

The proposal fills a specific gap Poland has identified in CADA: the EU's own cloud-sovereignty law, adopted 3 June after three slipped dates, grades cloud contracts by operator dependency but has no provision naming AI model-weight rights, leaving public bodies free to procure AI systems whose underlying models are controlled entirely by a non-EU vendor even when the hosting infrastructure passes CADA's test.

Warsaw's domestic-alternative target of 20-30% reflects a deliberate ceiling rather than an aspiration to full sovereignty; setting the bar below majority share avoids excluding foreign vendors outright while still creating a scored incentive domestic suppliers can compete for.

What could happen next?
  • Precedent

    Poland's explicit inclusion of AI model-weight rights exceeds CADA's scope and could become a template other member states adopt to close the same gap.

  • Risk

    Non-EU AI and cloud vendors may need to offer model-weight transparency or licensing concessions to remain eligible for Polish public contracts above the stated thresholds.

First Reported In

Update #13 · The €890m fine that cost more than it collects

Forbes· 26 Jul 2026
Read original
Causes and effects
This Event
Poland proposes model-weights test for state contracts
A national procurement rule reaches a dependency that Europe's cloud legislation leaves untouched, at thresholds low enough to catch routine ministry purchases.
Different Perspectives
China's foreign ministry
China's foreign ministry
Spokesman Lin Jian rejected Treasury Secretary Scott Bessent's 25 August warning that Iranian oil buyers face an "economic D-Day", saying sanctions do not help and that Beijing would safeguard its own rights and interests. China's Iranian crude imports had already halved for unrelated reasons.
Iraq's government and Erbil authorities
Iraq's government and Erbil authorities
Erbil authorities said 10 explosive-laden drones were shot down over the city on 1-2 September with no casualties. Iraq's government condemned the attacks without naming Iran as their source, and neither Washington nor Baghdad confirmed the IRGC's claim to have hit US bases there.
Bahrain Defence Force
Bahrain Defence Force
The General Command said air defences intercepted several Iranian missiles and drones on 1-2 September and called the use of such weapons against civilians and private property a flagrant violation of international humanitarian law.
Kuwait's Fire Force and foreign ministry
Kuwait's Fire Force and foreign ministry
KUNA reported a hostile Iranian drone struck a residential complex in Kuwait City on 2 September; Fire Force spokesman Brigadier General Mohammad Al-Gharib said losses were confined to property. Kuwait's foreign ministry called the attack a clear breach of its sovereignty.
Jordan's Armed Forces
Jordan's Armed Forces
Petra carried a statement that air defences intercepted eight missiles violating Jordanian airspace early on 31 August and 10 of 13 fired on 1 September. The statement named no target and did not address the IRGC's claim to have struck Camp Titin and killed US personnel.
CENTCOM
CENTCOM
CENTCOM's 1 September target list named IRGC air defence, radar, maritime and mine-laying sites in Iran but no tanker, after Axios reported anonymous officials describing a Trump-approved "tanker for tanker" drone policy. A CENTCOM spokesman declined to confirm the policy and referred questions to policymakers.