CADA FAQ
2624 plain-English answers on the EU Cloud and AI Development Act
Comparisons Vs
77
Data Centres Zones
179
Definitions Glossary
82
Enforcement Authorities
140
Eurocloud Federation
120
Foundations Scope
120
Frontier Ai Projects
121
Funding Support
79
Governance Acts Review
69
Howto Compliance
149
Interactions Eu Law
149
Leadership Initiatives
120
Marketplace Transparency
88
Member States
270
Open Source
117
Public Procurement
178
Risk Assessments
85
Sector Impact
119
Sovereignty Concepts
102
Sovereignty Framework
260
CADA: who designates an acceleration zone vs a strategic project?
Under the proposed Cloud and AI Development Act (CADA), the two designations would sit at different levels of government.
CADA voluntary recognition vs mandatory procurement levels
Under the proposed Cloud and AI Development Act (CADA), seeking Union assurance recognition would be voluntary for cloud service providers: a provider choo
CLOUD Act vs EU-US Data Privacy Framework vs CADA: which addresses sovereignty?
The US CLOUD Act and the EU-US Data Privacy Framework (DPF) both address cross-border data — access and transfer legality respectively — but neither establ
Will CADA review the Digital Decade targets for compute?
As proposed, the Cloud and AI Development Act (CADA) does not grant the European Commission the power to unilaterally amend or directly revise the Digital
Why is sustainable data centre deployment central to CADA?
Sustainable data centre deployment is central to the proposed Cloud and AI Development Act (CADA) because the EU aims to triple its computing capacity by 2
Why does the EU need EU-level action on data centre capacity?
The EU requires unified action on data centre capacity because relying on national-level approaches creates regulatory fragmentation, hinders cross-border
Why does CADA's frontier AI definition have no fixed compute threshold?
As proposed, the Cloud and AI Development Act (CADA) defines frontier AI without a fixed compute threshold to keep the definition technologically neutral a
Why does CADA skip definitions 23 and 24 in Article 2?
The Cloud and AI Development Act (CADA) proposal, COM(2026) 502 final, contains a numbering discontinuity in Article 2: the definitions jump from point (22
Why does CADA import software, hardware, component and manufacturer from the CRA?
As proposed, CADA imports the definitions of "software," "hardware," "component," and "manufacturer" from the Cyber Resilience Act (CRA, Regulation (EU) 20
Who sets the penalty rules under CADA? Article 24 explained
Under the proposed Cloud and AI Development Act (CADA), the European Union does not prescribe fixed fine amounts for infringements of the cloud computing s
Who pays compensation if a cloud provider breaches CADA?
Under the proposed Cloud and AI Development Act (CADA), the cloud computing service provider that breaches the regulation is directly liable for any damage
Who is liable for a CADA infringement within a provider group?
Under the proposed Cloud and AI Development Act (CADA), liability for infringements of the cloud sovereignty framework rests exclusively with the specific
Why was the EuroCloud Federation created? CADA's public-sector cloud strategy
The EuroCloud Federation was created under the proposed Cloud and AI Development Act (CADA) to pool sovereign public-sector cloud capabilities across the E
Why must EuroCloud sharing fees be cost-based under CADA?
Under the proposed Cloud and AI Development Act (CADA), fees charged within the EuroCloud Federation must be strictly limited to the costs incurred by the
Why does CADA separate the EuroCloud Federation from Commission procurement?
The proposed Cloud and AI Development Act (CADA) structurally separates the EuroCloud Federation (Chapter III) from Commission procurement (Chapter IV) to
Why was the Cloud and AI Development Act (CADA) proposed?
The Cloud and AI Development Act (CADA) was proposed to fix two linked problems: the EU does not have enough of its own computing capacity, and it relies h
Why is the EU dependent on non-EU cloud providers?
The EU relies heavily on non-European cloud providers because it lacks enough competitive domestic capacity: three non-EU hyperscalers control over 70% of
Why does CADA have two legal bases (Articles 114 and 173(3) TFEU)?
As proposed, the Cloud and AI Development Act (CADA) rests on a dual legal basis: Article 114 and Article 173(3) of the Treaty on the Functioning of the Eu
Why would a company want frontier AI priority project status under CADA?
A company would seek "frontier AI priority project" status under the proposed Cloud and AI Development Act (CADA) primarily to secure legally guaranteed ac
Why must a frontier AI priority project involve at least three Member States?
Under the proposed Cloud and AI Development Act (CADA), a frontier AI priority project must involve the participation of at least three Member States to qu
Why is broad participation across the Union required for frontier AI projects under CADA?
Under the proposed Cloud and AI Development Act (CADA), recognition as a "frontier AI priority project" is conditional on demonstrating broad, Union-wide p
Why does Europe need to fund its own cloud and AI?
Europe faces a critical strategic vulnerability: "currently, three non-EU hyperscalers control over 70% of the European cloud market." This concentration c
Who pays for the Cloud and AI Leadership Initiatives?
The Cloud and AI Leadership Initiatives under the proposed Cloud and AI Development Act (CADA) are not funded by a single, dedicated EU budget line or a ne
Who decides which CADA projects get funding? Commission vs Member States
Under the proposed Cloud and AI Development Act (CADA), the European Commission holds the exclusive power to designate specific high-priority projects—name
Will existing cloud contracts be affected when CADA starts to apply?
As proposed, the Cloud and AI Development Act (CADA) contains no explicit grandfathering clause for existing cloud contracts.
Why does the CADA review pay special attention to SMEs and new competitors?
The proposed Cloud and AI Development Act (CADA) includes a mandatory review mechanism under Article 47 that explicitly requires the European Commission to
Who sits on the CADA comitology committee?
The Cloud and AI Development Act (CADA) establishes a comitology committee under Article 46 to oversee the adoption of implementing acts.
Who pays for the independent audit under CADA? Costs for Levels 1–4
Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers seeking recognition for Union assurance levels 2, 3, or 4 must be
Which National Competent Authority Do I Apply to for CADA Recognition?
Under the proposed Cloud and AI Development Act (CADA), a cloud computing service provider must submit its application for Union assurance recognition to t
Where do I start with CADA compliance if I am completely new to it?
If you are new to the proposed Cloud and AI Development Act (CADA), your immediate priority is to determine your organisational role under Article 2 (e.g.,
Will EUCS levels map directly to CADA Union assurance levels?
No, as proposed, the European Cybersecurity Certification Scheme for Cloud Services (EUCS) assurance levels do not map directly or automatically to the Clo
CADA Repositories & Interoperable Europe: Do they need an assessment?
As proposed, the Cloud and AI Development Act (CADA) does not automatically mandate an interoperability assessment under the Interoperable Europe Act (Regu
Why is the GDPR not enough to achieve cloud sovereignty under CADA?
The General Data Protection Regulation (GDPR) ensures lawful data processing but does not guarantee operational autonomy or immunity from foreign laws that
Why did the EU create the Cloud and AI Leadership Initiatives?
The EU created the Cloud and AI Leadership Initiatives under the proposed Cloud and AI Development Act (CADA) to address a critical structural deficit: the
Who sets the rules for establishing Centres for AI under CADA?
Under the proposed Cloud and AI Development Act (CADA), while Member States are mandated to establish Experience and Acceleration Centres for AI ('Centres
Who runs the CADA Centres for AI?
Under the proposed Cloud and AI Development Act (CADA, COM(2026) 502 final — a draft regulation, not yet in force), the Experience and Acceleration Centres
Why list in the CADA repository? Public procurement access & market advantage
As proposed in the Cloud and AI Development Act (CADA), listing in the central repository is effectively mandatory for cloud providers seeking to serve the
Why must NCAs notify other Member States of recognition changes under CADA?
Under the proposed Cloud and AI Development Act (CADA), national competent authorities (NCAs) are legally required to notify all other Member States and th
Why does CADA keep revoked recognitions visible for five years?
Under the proposed Cloud and AI Development Act (CADA), the European Commission's central repository must retain records of revoked cloud computing service
Who is Sweden's national competent authority under CADA?
The proposed Cloud and AI Development Act (CADA) does not pre-select a specific Swedish body as the national competent authority.
Who is Spain's national competent authority under CADA?
As proposed in the Cloud and AI Development Act (CADA), Spain is required to designate one or more national competent authorities responsible for enforcing
Who is Slovenia's national competent authority under CADA?
As proposed in the Cloud and AI Development Act (CADA), Slovenia is required to designate one or more national competent authorities responsible for enforc
Why does CADA require sharing through a connected catalogue?
As proposed in the Cloud and AI Development Act (CADA), Union entities and public-sector bodies must share software developed for them via a catalogue or r
Why does CADA promote open source for digital sovereignty?
The proposed Cloud and AI Development Act (CADA) elevates open source from a technical preference to a strategic imperative for the European Union's digita
Why does CADA create an OSPO Network? (Recital 84 explained)
The proposed Cloud and AI Development Act (CADA) establishes a Network of Open Source Programme Offices (OSPO Network) to ensure the "effective and consist
Will small public bodies be able to afford CADA procurement fees?
Yes, small public bodies should be able to afford CADA procurement fees as proposed, because the framework is explicitly designed as a strict cost-recovery
Why would a private company do a voluntary CADA impact assessment?
Under the proposed Cloud and AI Development Act (CADA), private companies operating in high-criticality sectors—specifically those listed in Annex I of the
Why does CADA add a Union added value criterion to procurement?
As proposed, the Cloud and AI Development Act (CADA) would mandate that public-sector contracting authorities include a specific "Union added value" criter
Why is the CADA risk assessment described as a risk-based and context-specific approach?
The proposed Cloud and AI Development Act (CADA) rejects a "one-size-fits-all" mandate for cloud sovereignty.
Why does CADA treat dependence on non-EU providers as a strategic risk?
The proposed Cloud and AI Development Act (CADA) treats dependence on non-EU cloud providers as a strategic risk because it exposes the Union to critical v
Why does CADA encourage multi-cloud architectures?
As proposed, the Cloud and AI Development Act (CADA) encourages multi-cloud and multi-vendor architectures to mitigate strategic risks associated with depe
Why does CADA emphasise secure and verifiable compute for sensitive sectors?
The proposed Cloud and AI Development Act (CADA) introduces "secure and verifiable compute" as a critical technical enabler for deploying AI in sensitive s
Which CADA obligations bite hardest for fintech companies?
For fintech companies, the proposed Cloud and AI Development Act (CADA) introduces a critical new compliance layer: Article 31, which empowers the Commissi
Which CADA assurance level should defence workloads use?
As proposed, the Cloud and AI Development Act (CADA) does not automatically mandate a single assurance level for all defence workloads.
Why is cloud sovereignty important for critical infrastructure? CADA
Under the proposed Cloud and AI Development Act (CADA), sovereignty matters for cloud-hosted critical infrastructure because dependence on third-country pr
Why is sovereignty described as layered or nuanced in CADA?
The proposed Cloud and AI Development Act (CADA) explicitly rejects a binary "sovereign vs.
CADA Sovereignty: Why Assessment is Per Service, Not Per Provider
Under the proposed Cloud and AI Development Act (CADA), cloud sovereignty is assessed and recognised at the individual service level, not the corporate pro
Why would a public body require CADA Level 4 over Level 3?
A public body would require CADA Union Assurance Level 4 over Level 3 only when its risk assessment identifies that the cloud service handles the most sens
Why choose a CADA Level 1 provider? The baseline for public procurement
Public-sector buyers would choose a Cloud and AI Development Act (CADA) Union Assurance Level 1 provider because it serves as the mandatory baseline for al
Why is CADA Level 4 the highest sovereignty tier?
Under the proposed Cloud and AI Development Act (CADA), Union Assurance Level 4 is the highest sovereignty tier because it imposes the strictest cumulative