18APR

CAIDA due before College, scope cut

4 min read

14:57UTC

The European Commission is set to put its Tech Sovereignty Package before the College of Commissioners on Wednesday 3 June, its fourth scheduled date, with cloud restrictions trimmed to public-sector tenders and the Chips Act's 20 per cent market-share target dropped.

← Back to Hormuz opens and closes in 24 hours Jump to analysis ↓

ConflictDeveloping

Key takeaway

The Commission is set to adopt CAIDA today after narrowing it to public-sector tenders to avoid a US trade clash.

The European Commission is due before the College of Commissioners this morning, Wednesday 3 June, to adopt its Tech Sovereignty Package, its fourth scheduled date after misses in March, April and 27 May . The package combines the Cloud and AI Development Act (CAIDA, the law meant to keep US hyperscalers out of sensitive EU public data) and a revised Chips Act II, the bloc's semiconductor investment instrument. Commission Executive Vice-President Henna Virkkunen is due to present it before the Telecom Council, the EU's gathering of national telecoms ministers, on 9 June ¹. As of this hour the College had not met or published; the most recent Commission release, dated 2 June, concerns wildfire response ². Adoption today remains scheduled rather than confirmed.

The scope has narrowed. CAIDA's cloud restrictions now cover public-sector tenders in health, finance, judicial and energy services only, with private enterprise excluded outright ³. Chips Act II has dropped its 20 per cent global market-share target, abandoned after the Magdeburg and Crolles fab cancellations, and replaced it with a EUR 120bn public-and-private investment goal to 2035 . In place of supply subsidies it brings demand aggregation, a crisis override on supply contracts, and EUR 300,000 fines for firms that withhold supply-chain data ⁴. A market-share target was a number trade lawyers could litigate against; an investment aspiration carries no such test.

The trimming has a single author. Germany's automotive sector faces US tariff exposure under the EU-US trade framework, and restricting private-enterprise cloud would have handed Washington a clean Section 301 claim. US Ambassador Andrew Puzder called the package a breach of that framework on 25 May . Berlin's silence in the College was the structural veto, and the public-sector-only scope is the concession written in to dodge it. The law that finally reaches the College is the version that no longer touches the export sector whose objection stalled it.

Deep Analysis

In plain English

The European Union has been trying to pass a law called CAIDA that would stop government agencies from using American cloud services like Amazon Web Services or Microsoft Azure for sensitive data such as health records and court files. The idea is that US law lets American officials demand access to data held by US companies anywhere in the world, which is a problem for European governments. The version of the law being voted on in June 2026 only covers government contracts, not private companies. It has also been delayed four times. Separately, a sister law called Chips Act II would spend EUR 120bn trying to build more computer chip factories in Europe so the continent is less reliant on Asian and American suppliers.

Deep Analysis

Root Causes

Three structural forces produced the public-sector-only scope. First, Germany's automotive sector faces up to USD 200bn in threatened US tariff exposure; Berlin calculated that a CAIDA applying to private enterprise would give Washington grounds to escalate. The College silence that structured the carve-out was a trade-political calculation dressed as legislative refinement.

Second, the Commission lacks a legal base to mandate private-sector cloud procurement without a new Treaty clause. Article 114 (internal market harmonisation) does not comfortably extend to directing private firms' IT purchasing. Article 114 (internal market harmonisation), the Commission's chosen legal base, does not extend to directing private firms' IT purchasing; the Commission's own legal service flagged this constraint before the drafting phase began.

Third, there is no European public cloud large enough to absorb a private-sector mandate today. OVHcloud, Hetzner and Scaleway combined hold roughly 4% of EU cloud revenue. A mandate without a viable domestic alternative would produce compliance chaos rather than sovereignty.

What could happen next?

Consequence
A public-sector-only CAIDA creates a legal two-tier system: government data under EU cloud, corporate data still subject to US CLOUD Act compulsion.
Medium term · Assessed
Risk
If the College again delays past 3 June, the package loses its pre-summer window and faces a new European Parliament term that may reopen scope negotiations.
Short term · Reported
Opportunity
EUR 300,000 supply-chain data fines in Chips Act II give the Commission a new intelligence tool on semiconductor dependencies, usable independently of CAIDA's fate.
Medium term · Reported

Source Landscape

This story draws on neutral-leaning sources from Belgium and United Kingdom

Belgium

United Kingdom

LeftRight

Primary parallel: The 1999 EU Telecoms Package set open-access obligations on incumbent fixed-line operators but excluded mobile networks on the grounds the market was not yet mature. Mobile became dominant within five years, and the asymmetric rules forced a decade-long corrective to achieve equivalent competition. CAIDA's private-enterprise exclusion maps directly onto that structural error: the unregulated sector is already the larger one.

Counter-parallel: Japan's 2020 Economic Security Promotion Act took the opposite approach, applying supply-chain disclosure requirements across both public and private critical infrastructure from the start. Tokyo judged that a two-tier rule creates arbitrage that defeats the purpose. Japanese firms still report the compliance cost was underestimated, suggesting the EU's caution is not purely self-defeating.

EU public-sector cloud spend runs at approximately EUR 30bn per year across member states, of which AWS, Microsoft Azure and Google Cloud together hold around 65%. CAIDA's mandate, if it adopts and survives the Telecom Council, would redirect at most EUR 19bn annually toward European providers over its transition period.

The structural question is whether EUR 19bn is enough to fund the capex cycle needed to close the compute gap Bruegel measured . OVHcloud's most recent annual capex was EUR 580m. Scaling to absorb a fraction of redirected public spend requires debt or equity capital unavailable at current European tech-company valuations. The Chips Act II demand-aggregation tool is designed to address the supply side; without it, the cloud mandate produces a bottleneck rather than a market.

Consensus view: CEPS analyst Philipp Lausberg and Bruegel's Niclas Poitiers both assess that CAIDA's public-sector-only carve-out has gutted the original instrument's industrial logic. The Draghi report on which CAIDA is based called for infrastructure-layer sovereignty across the economy; the version scheduled for 3 June covers roughly 8% of total EU cloud spend.

Counter-view: AEI technology policy scholar Claude Barfield argues the carve-out was never a retreat but a rational first step: the US CLOUD Act already applies a legal risk that is government-specific, and extending restrictions to private firms would duplicate DMA cloud-gatekeeper obligations already under investigation. Barfield's point has structural support from the German position .

Key tension: Whether a public-sector-only instrument can create enough switching demand to grow a viable European cloud tier, or whether the private-enterprise exclusion means European hyperscalers remain trapped at too small a scale to compete.

First Reported In

Update #7 · Sovereignty arrives, minus Brussels

European Parliament· 3 Jun 2026

Read original →

Causes and effects

Caused by

EU sovereignty law slips a third time

CAIDA's public-sector-only scope is the direct legislative response to Puzder's 25 May trade-framework warning and Berlin's sustained College silence.

Occurred 27 May 2026

Read story →

Brussels stays silent on 20% chip goal

Chips Act II dropped the 20% market-share target following the Brussels statement confirming it was abandoned after the Magdeburg and Crolles cancellations.

Occurred 19 Apr 2026

Read story →

Bruegel: the law leaves the chips problem

Bruegel's finding that CAIDA does not address the silicon layer provides analytical backing for critics who argue the narrowed package is insufficient.

Occurred 19 May 2026

Read story →

UK picks champions as EU shares the bet

The UK's national-champion equity model contrasts with the EU's shared-procurement approach, with both running in parallel as CAIDA adopts.

Occurred 5 Jun 2026

Read story →

This Event

CAIDA due before College, scope cut

The EU's flagship sovereignty law is due to pass only after being narrowed enough to no longer threaten the EU-US trade truce that constrains it.

Led to

Dutch block first US cloud takeover

The Netherlands blocking action demonstrates that member states already hold the sovereignty tool CAIDA is legislating, applied independently of the Brussels timetable.

Occurred 26 May 2026

Read story →

France's G7 text drops cloud sovereignty

France chaired the G7 ministerial without an adopted package to table, which directly explains why it produced a communique that did not mention CAIDA or cloud sovereignty.

Occurred 29 May 2026

Read story →

Brussels adopts CADA, narrows its scope

Commission's fourth adoption date (ID:3865) delivered the CADA adoption on 3 June 2026.

Occurred 3 Jun 2026

Read story →

Different Perspectives

Jordan

Jordan has not addressed the IRGC's claim that Jordanian civilians and soldiers supplied targeting intelligence for the 20 July Aqaba strike, even as its deputy prime minister received a condemnation call over Iran's earlier missile fire. The base has now produced the war's first confirmed American deaths on Jordanian soil.

CENTCOM

CENTCOM confirmed a third American service member died in northern Iraq on 19 July clearing unexploded ordnance from a downed Iranian drone, and recovered unidentified remains at Muwaffaq Salti Air Base in Jordan. The Pentagon has framed its Khuzestan strikes as degrading IRGC capacity, a rationale that stretches to explain a reactor foundation with no nuclear material in it.

Kuwait

Kuwait's military said it was confronting Iranian attacks after the Shuaiba power and desalination complex burned for the second time in two days on 19 July, following an earlier ministry request that households ration water. Roughly 90 per cent of Kuwait's drinking water depends on the same generating units Iran keeps hitting.

IRGC

The IRGC claimed a 21st wave of Operation Nasr-2 struck Aqaba Airport and Azraq on 20 July, destroying hangars and aircraft, and thanked Jordanians for supplying intelligence. No US, Jordanian or Kuwaiti source has confirmed any part of the claim, which Press TV alone carried.

IAEA

The IAEA said it is looking into reports of a 19 July strike on the Darkhovin nuclear plant construction site, confirming inspectors found no nuclear material there on their last visit. Grossi again called for restraint near nuclear sites, a faster response than the four months of silence that followed the disputed Bushehr strike.

Shipping and war-risk insurers

War-risk premiums for Hormuz transits reached 3 to 10 per cent of hull value on 17 July, against 0.25 per cent before the war, as Brent cleared $87 and daily transits fell to eight vessels. Underwriters are pricing the confirmed UKMTO mine near the Traffic Separation Scheme, not the IRGC's unconfirmed 18 July mining claim, which CENTCOM called false.