Abstract
Throughout the EU, there is a clear political ambition to use public procurement as a lever to reduce reliance on a small number of non-EU cloud service providers and to open the market to a wider range of providers. The Commission presents its proposal for a Cloud and AI Development Act (CADA) as a way to ‘decrease overreliance on certain providers’. Yet, as the CADA proposal is designed, it is more likely to preserve the status quo than to enable public procurement to be used to scale up an open source and interoperable European digital stack.
In this report, Zuzanna Warso and Kristina Irion, an Associate Professor at the Institute for Information Law, University of Amsterdam, examine Title IV of the CADA proposal entitled ‘Autonomy’, which covers a cloud computing sovereignty framework with its four Union assurance levels, and risk assessments and public procurement of cloud computing services used by public sector bodies in the Member States and Union entities.
cloud computing, Digital sovereignty, EU law