EU unveils technology sovereignty package

The European Commission on June 3 unveiled a Technology Sovereignty Package aimed at reducing the European Union’s dependence on non-EU providers across semiconductors, artificial intelligence, cloud and open source. The package combines two legislative proposals — Chips Act 2.0 and a Cloud and AI Development Act — with an EU Open Source Strategy and a strategic roadmap for digitalisation and AI in energy. (digital-strategy.ec.europa.eu) Brussels said the measures are intended to strengthen digital autonomy, resilience and industrial capacity. Commission President Ursula von der Leyen said Europe “cannot afford to depend on others for the technologies that keep our hospitals running, our energy grids stable and our services secure.” (cnbc.com) ### What exactly did Brussels put on the table? The Commission said on June 3 that the package covers four tracks: semiconductors, cloud and AI infrastructure, open source, and digital energy systems. Chips Act 2.0 is meant to expand capacity in advanced semiconductors and support investment, while the Cloud and AI Development Act would support research, innovation and data-centre deployment across the bloc. The Commission’s digital strategy page said the package also includes an EU Open Source Strategy to scale open-source alternatives in priority areas and support wider use in public administrations. A separate roadmap for digitalisation and AI in energy is intended to integrate data centres into Europe’s energy system and support “sovereign and secure AI models” for the sector. (digital-strategy.ec.europa.eu) ### Why is the EU framing this around dependence? The Commission said the European Union currently relies on non-EU countries for more than 80% of key digital products, services, infrastructure and intellectual property. That dependency, the Commission said, affects economic strength, security and long-term competitiveness. (commission.europa.eu) CNBC reported that the push comes amid growing concern in Brussels over reliance on U.S. cloud companies and on Asian supply chains for chips. Von der Leyen said the package is aimed at technologies tied to essential services, including hospitals and energy grids. (commission.europa.eu) ### What is the “kill switch” concern in cloud? Henna Virkkunen, the Commission’s executive vice-president for tech sovereignty, said Brussels wants to ensure that providers handling critical workloads do not have a “kill switch.” CNBC reported that the planned Cloud and AI Development Act would create an EU-wide framework setting different sovereignty levels for cloud services used for sensitive workloads in public organisations. (digital-strategy.ec.europa.eu) Virkkunen told reporters it would be difficult for U.S. companies to meet the highest sovereignty levels because of the U.S. Cloud Act, which allows U.S. law enforcement to seek data from American companies regardless of where it is stored, CNBC reported. She said, “We want to make sure that our most critical sensitive data is stored in Europe.” (cnbc.com) ### What does this mean for cloud and infrastructure design? The Commission said the cloud proposal would introduce a single EU-wide framework to assess cloud and AI sovereignty. CNBC, citing lawyer Catherine di Lorenzo of A&O Shearman, said the direction of travel extends beyond data residency to questions of ownership, operational control, immunity from extraterritorial laws and supply-chain transparency. (cnbc.com) That means architects serving sensitive EU workloads are likely to face closer scrutiny over where control planes sit, who can administer systems, how encryption keys are managed and whether services can continue through a provider-side disruption. Those requirements are implied by the Commission’s sovereignty framework and by Virkkunen’s comments on critical workloads, rather than spelled out line by line in the summary documents now public. (cnbc.com) ### How broad is the package beyond cloud? The Commission said the measures are also tied to its AI industrial agenda and to Europe’s 2030 Digital Decade targets. The cloud and AI proposal is described as complementing the bloc’s AI Continent Action Plan, while the semiconductor and open-source pieces are framed as part of a broader push to build domestic capacity in strategic technologies. (commission.europa.eu) DIGITALEUROPE said in a statement that the package could strengthen Europe but should still encourage investment. That response underscored that the next stage will be shaped not only by Brussels but also by industry and national governments as the legislation moves forward. (commission.europa.eu) ### What happens next in Brussels? The Commission said the package includes two legislative proposals, which means Chips Act 2.0 and the Cloud and AI Development Act now enter the EU lawmaking process. The Commission’s press materials and policy pages published on June 2 and June 3 direct readers to the communication, factsheet and question-and-answer documents that will underpin negotiations with member states and the European Parliament. (digital-strategy.ec.europa.eu) (cdn.digitaleurope.org)