The European Commission has unveiled its long-awaited digital sovereignty package, aiming to reduce the bloc's reliance on US technology giants. However, critics argue the proposals lack vision and contain significant flaws that could undermine their effectiveness.
The package includes the Cloud and AI Development Act (Cada), which would create a ranking system for cloud providers handling public-sector data. In theory, the most sensitive operations would be reserved for providers meeting the highest sovereignty standards, favouring European firms. Yet the strictest level, where US big tech would be excluded, applies only to a narrow segment of public-sector cloud procurement, representing a small fraction of overall European cloud spending.
Enforcement of Cada would be delegated to individual EU governments, many of which have incentives to implement rules weakly to attract US tech investment or avoid US pressure. This mirrors the underenforcement of the EU's data protection rules, notably in Ireland, which relies on big tech investments and tax payments.
The commission's approach to AI also draws criticism. Rather than establishing careful, evidence-based adoption, Brussels largely defers to the AI vision promoted by US big tech and backed by the Trump administration, which prioritises rapid deployment over societal and ethical considerations. This contrasts with Pope Leo's recent encyclical warning that technological progress without ethical growth may lead to an increase in means without humanity.
The push for digital sovereignty comes amid growing concerns over Europe's dependence on US technology, exposed by the Trump administration's confrontational approach. Sanctions against International Criminal Court judges, including Slovenian Beti Hohler, saw their access to US services cut off overnight. Elon Musk's use of X and Starlink to influence European debate, and US orders limiting foreign access to AI products, further highlight the risks.
With the EU relying on non-EU countries for over 80% of its technology and 70% of cloud computing, the package is a belated recognition that dependence on US tech is not just economic but a threat to independence and security. However, without stronger enforcement and a more critical stance on AI, the plans may fail to deliver true sovereignty.
