The European Commission’s Cloud and AI Development Act introduces a four-tier sovereignty scale that would effectively bar US cloud providers from the most sensitive national security contracts due to residual exposure to foreign laws. Defence ministries are pushing back, citing interoperability risks with NATO systems and a capability gap where no EU-native provider currently matches the scale or AI tooling of AWS, Azure, and Google. The framework is still in legislative negotiation, with full implementation for the strictest tier likely delayed until 2027 or later. For financial institutions, this creates regulatory uncertainty around the long-term addressable market for US cloud vendors in European public sectors and highlights potential credit risks tied to compliance costs or revenue disruption.
281 other tracked developments touching the same claims.