11SEP

CAIDA due before College, scope cut

4 min read

09:25UTC

The European Commission is set to put its Tech Sovereignty Package before the College of Commissioners on Wednesday 3 June, its fourth scheduled date, with cloud restrictions trimmed to public-sector tenders and the Chips Act's 20 per cent market-share target dropped.

← Back to 23 to 3: Iran goes to the Security Council Jump to analysis ↓

ConflictDeveloping

Key takeaway

The Commission is set to adopt CAIDA today after narrowing it to public-sector tenders to avoid a US trade clash.

The European Commission is due before the College of Commissioners this morning, Wednesday 3 June, to adopt its Tech Sovereignty Package, its fourth scheduled date after misses in March, April and 27 May . The package combines the Cloud and AI Development Act (CAIDA, the law meant to keep US hyperscalers out of sensitive EU public data) and a revised Chips Act II, the bloc's semiconductor investment instrument. Commission Executive Vice-President Henna Virkkunen is due to present it before the Telecom Council, the EU's gathering of national telecoms ministers, on 9 June ¹. As of this hour the College had not met or published; the most recent Commission release, dated 2 June, concerns wildfire response ². Adoption today remains scheduled rather than confirmed.

The scope has narrowed. CAIDA's cloud restrictions now cover public-sector tenders in health, finance, judicial and energy services only, with private enterprise excluded outright ³. Chips Act II has dropped its 20 per cent global market-share target, abandoned after the Magdeburg and Crolles fab cancellations, and replaced it with a EUR 120bn public-and-private investment goal to 2035 . In place of supply subsidies it brings demand aggregation, a crisis override on supply contracts, and EUR 300,000 fines for firms that withhold supply-chain data ⁴. A market-share target was a number trade lawyers could litigate against; an investment aspiration carries no such test.

The trimming has a single author. Germany's automotive sector faces US tariff exposure under the EU-US trade framework, and restricting private-enterprise cloud would have handed Washington a clean Section 301 claim. US Ambassador Andrew Puzder called the package a breach of that framework on 25 May . Berlin's silence in the College was the structural veto, and the public-sector-only scope is the concession written in to dodge it. The law that finally reaches the College is the version that no longer touches the export sector whose objection stalled it.

Deep Analysis

In plain English

The European Union has been trying to pass a law called CAIDA that would stop government agencies from using American cloud services like Amazon Web Services or Microsoft Azure for sensitive data such as health records and court files. The idea is that US law lets American officials demand access to data held by US companies anywhere in the world, which is a problem for European governments. The version of the law being voted on in June 2026 only covers government contracts, not private companies. It has also been delayed four times. Separately, a sister law called Chips Act II would spend EUR 120bn trying to build more computer chip factories in Europe so the continent is less reliant on Asian and American suppliers.

Deep Analysis

Root Causes

Three structural forces produced the public-sector-only scope. First, Germany's automotive sector faces up to USD 200bn in threatened US tariff exposure; Berlin calculated that a CAIDA applying to private enterprise would give Washington grounds to escalate. The College silence that structured the carve-out was a trade-political calculation dressed as legislative refinement.

Second, the Commission lacks a legal base to mandate private-sector cloud procurement without a new Treaty clause. Article 114 (internal market harmonisation) does not comfortably extend to directing private firms' IT purchasing. Article 114 (internal market harmonisation), the Commission's chosen legal base, does not extend to directing private firms' IT purchasing; the Commission's own legal service flagged this constraint before the drafting phase began.

Third, there is no European public cloud large enough to absorb a private-sector mandate today. OVHcloud, Hetzner and Scaleway combined hold roughly 4% of EU cloud revenue. A mandate without a viable domestic alternative would produce compliance chaos rather than sovereignty.

What could happen next?

Consequence
A public-sector-only CAIDA creates a legal two-tier system: government data under EU cloud, corporate data still subject to US CLOUD Act compulsion.
Medium term · Assessed
Risk
If the College again delays past 3 June, the package loses its pre-summer window and faces a new European Parliament term that may reopen scope negotiations.
Short term · Reported
Opportunity
EUR 300,000 supply-chain data fines in Chips Act II give the Commission a new intelligence tool on semiconductor dependencies, usable independently of CAIDA's fate.
Medium term · Reported

Source Landscape

This story draws on neutral-leaning sources from Belgium and United Kingdom

Belgium

United Kingdom

LeftRight

Primary parallel: The 1999 EU Telecoms Package set open-access obligations on incumbent fixed-line operators but excluded mobile networks on the grounds the market was not yet mature. Mobile became dominant within five years, and the asymmetric rules forced a decade-long corrective to achieve equivalent competition. CAIDA's private-enterprise exclusion maps directly onto that structural error: the unregulated sector is already the larger one.

Counter-parallel: Japan's 2020 Economic Security Promotion Act took the opposite approach, applying supply-chain disclosure requirements across both public and private critical infrastructure from the start. Tokyo judged that a two-tier rule creates arbitrage that defeats the purpose. Japanese firms still report the compliance cost was underestimated, suggesting the EU's caution is not purely self-defeating.

EU public-sector cloud spend runs at approximately EUR 30bn per year across member states, of which AWS, Microsoft Azure and Google Cloud together hold around 65%. CAIDA's mandate, if it adopts and survives the Telecom Council, would redirect at most EUR 19bn annually toward European providers over its transition period.

The structural question is whether EUR 19bn is enough to fund the capex cycle needed to close the compute gap Bruegel measured . OVHcloud's most recent annual capex was EUR 580m. Scaling to absorb a fraction of redirected public spend requires debt or equity capital unavailable at current European tech-company valuations. The Chips Act II demand-aggregation tool is designed to address the supply side; without it, the cloud mandate produces a bottleneck rather than a market.

Consensus view: CEPS analyst Philipp Lausberg and Bruegel's Niclas Poitiers both assess that CAIDA's public-sector-only carve-out has gutted the original instrument's industrial logic. The Draghi report on which CAIDA is based called for infrastructure-layer sovereignty across the economy; the version scheduled for 3 June covers roughly 8% of total EU cloud spend.

Counter-view: AEI technology policy scholar Claude Barfield argues the carve-out was never a retreat but a rational first step: the US CLOUD Act already applies a legal risk that is government-specific, and extending restrictions to private firms would duplicate DMA cloud-gatekeeper obligations already under investigation. Barfield's point has structural support from the German position .

Key tension: Whether a public-sector-only instrument can create enough switching demand to grow a viable European cloud tier, or whether the private-enterprise exclusion means European hyperscalers remain trapped at too small a scale to compete.

First Reported In

Update #7 · Sovereignty arrives, minus Brussels

European Parliament· 3 Jun 2026

Read original →

Causes and effects

Caused by

EU sovereignty law slips a third time

CAIDA's public-sector-only scope is the direct legislative response to Puzder's 25 May trade-framework warning and Berlin's sustained College silence.

Occurred 27 May 2026

Read story →

Brussels stays silent on 20% chip goal

Chips Act II dropped the 20% market-share target following the Brussels statement confirming it was abandoned after the Magdeburg and Crolles cancellations.

Occurred 19 Apr 2026

Read story →

Bruegel: the law leaves the chips problem

Bruegel's finding that CAIDA does not address the silicon layer provides analytical backing for critics who argue the narrowed package is insufficient.

Occurred 19 May 2026

Read story →

UK picks champions as EU shares the bet

The UK's national-champion equity model contrasts with the EU's shared-procurement approach, with both running in parallel as CAIDA adopts.

Occurred 5 Jun 2026

Read story →

This Event

CAIDA due before College, scope cut

The EU's flagship sovereignty law is due to pass only after being narrowed enough to no longer threaten the EU-US trade truce that constrains it.

Led to

Dutch block first US cloud takeover

The Netherlands blocking action demonstrates that member states already hold the sovereignty tool CAIDA is legislating, applied independently of the Brussels timetable.

Occurred 26 May 2026

Read story →

France's G7 text drops cloud sovereignty

France chaired the G7 ministerial without an adopted package to table, which directly explains why it produced a communique that did not mention CAIDA or cloud sovereignty.

Occurred 29 May 2026

Read story →

Brussels adopts CADA, narrows its scope

Commission's fourth adoption date (ID:3865) delivered the CADA adoption on 3 June 2026.

Occurred 3 Jun 2026

Read story →

Different Perspectives

Turkey

Golden Global Portfoy Yonetimi closed three funds to new money a day after telling regulators they were legally separate from its sanctioned parent, and the central bank held its rate at 37 per cent citing energy-driven inflation risk. Ankara is absorbing balance-sheet and monetary costs from a war it is not fighting.

Qatar

Qatar's foreign ministry said it was coordinating with China during a Beijing visit to restart negotiations, while filing hundreds of letters at the UN documenting Iranian strikes on its own civilian facilities. Doha is mediating for a neighbour it is also formally accusing, a contradiction the referral's clean vote count does not show.

China and Russia

China and Russia voted against the IAEA referral alongside Niger, and Iran's ambassador told the Board that inspections were impossible during a war Iran did not start. Beijing is separately mediating between Doha and Tehran, meaning the same power blocking the West's legal track is running the diplomatic one that might actually end the war.

Jordan

Jordan said it intercepted 18 of the 20 Iranian ballistic missiles fired at its territory on 8 September, the war's first sustained salvo against a state that is not a combatant. Amman's 90 per cent interception rate held, but a tenfold jump in missiles fired in a single volley raises what the next one might carry.

United States

CENTCOM said its strikes disabled five Iranian tankers only after two failed missile attempts on a US warship, and Treasury moved the same week to a presumption of denial on all Iran licences. Washington now treats commercial shipping and financial plumbing as one enforcement front rather than two separate tracks.

Iran / IRGC

Iran's foreign ministry called the CENTCOM tanker strikes a war crime and a breach of the UN Charter, while the IRGC named two US destroyers it says it damaged without releasing images. Tehran expects the claims, unverifiable either way, to sustain domestic morale after losing five tankers in a single day.