EU eyes curbs on AWS, Azure and Google Cloud for sensitive data

News
Friday, 08 May 2026 at 21:05
EU overweegt beperkingen op AWS, Azure en Google Cloud voor gevoelige data
The European Commission is weighing new rules that could curb the use of U.S. cloud platforms for sensitive government data. According to CNBC sources, Brussels is discussing measures that would require government, defense, and critical infrastructure data to be stored and processed more often within European cloud environments.
The plans directly affect the U.S. cloud giants: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud, which together dominate much of Europe’s cloud market. The debate signals a new phase in Europe’s push on digital sovereignty, AI infrastructure, and strategic dependence on U.S. tech.

Why the EU is turning up the pressure

The European Commission is working on a broader “Tech Sovereignty Package,” expected by the end of May. Within it, Brussels is assessing which digital infrastructure should be deemed strategically critical—potentially including AI systems, cloud platforms, and sensitive public datasets.
At the heart of the issue is the U.S. CLOUD Act of 2018, which allows American authorities, under certain conditions, to access data held by U.S. companies even if that data sits on European soil. EU policymakers fear this puts sensitive government information indirectly under U.S. jurisdiction.
That risk looms larger as AI systems depend on vast datasets and compute. European governments want to avoid running critical AI models, health records, defense systems, or citizen data entirely on foreign-owned infrastructure.

AI sovereignty becomes a strategic battleground

The debate now goes far beyond privacy. EU officials increasingly treat cloud infrastructure as a geopolitical technology—on par with energy or telecom networks.
That matters because nearly all modern AI services run on hyperscale cloud platforms. Companies like OpenAI, Anthropic, and many European AI startups rely on AWS, Azure, or Google Cloud to train and deploy models.
If Europe restricts sensitive data, the fallout could reshape:
  • AI training within government projects
  • public AI assistants
  • defense and security applications
  • healthcare AI
  • cloud contracts for European governments
  • European AI startups reliant on U.S. infrastructure
At the same time, it could open doors for European cloud players like OVHcloud, Scaleway, StackIT, and other “sovereign cloud” initiatives.

Europe’s cloud challengers gain momentum

Brussels has already taken concrete steps toward local cloud infrastructure. Last month, the Commission awarded a €180 million cloud contract to several European providers under a new sovereignty framework.
The tender shows how Europe aims to build an alternative ecosystem around European AI and cloud tech, with a sharp focus on:
  • European ownership structures
  • local data processing
  • independence from non-EU laws
  • interoperability
  • open-source infrastructure
Notably, some hybrid setups with U.S. technology remain permitted for now, provided European entities retain operational control—as seen in a consortium involving Google Cloud and French defense firm Thales.

Big implications for AI and the public sector

Any clampdown on U.S. cloud platforms could fundamentally reshape Europe’s AI market. Many governments already run critical workloads on AWS or Microsoft Azure. A forced migration to European alternatives would be complex and costly.
Conversely, the move could accelerate investment in European AI infrastructure. Europe has long sought to reduce dependence on U.S. Big Tech but has lagged on scale, funding, and available cloud capacity.
The rise of generative AI raises the stakes. Without homegrown capacity, Europe stays reliant on foreign infrastructure for training, hosting, and inference of AI models.
That puts Europe’s AI competitiveness squarely in play.

U.S. tech giants feel the heat

For Amazon, Microsoft, and Google, a sensitive precedent is forming. European governments are a crucial growth market for cloud and AI services.
The debate also lands as Brussels considers whether cloud and AI services should face tougher DMA enforcement. The EU aims to prevent a handful of U.S. firms from locking up critical digital infrastructure.
Tech companies, meanwhile, warn that tighter EU rules could slow innovation and heighten privacy risks. Google this week criticized new European proposals on data sharing and AI regulation.

A wider geopolitical signal

The potential cloud curbs show AI infrastructure is fast becoming part of geopolitical power dynamics.
Through regulation, public investment, and local infrastructure, Europe is seeking more control over data, AI models, and digital dependencies. The AI race is moving beyond models and chips to the cloud layer underneath.
The coming months will be pivotal. If Brussels moves to restrict sensitive government data on U.S. clouds, it could trigger the biggest shift in Europe’s cloud market in a decade.
loading

Popular news

Latest comments

    Loading