Summary Under the proposed Cloud and AI Development Act (CADA), the European Commission has the flexibility to delegate the delivery of ancillary procurement support to Union bodies or agencies, or to engage subcontractors. However, this delegation does not transfer the Commission's ultimate legal and operational responsibility. As the central purchasing body, the Commission retains full accountability for the strategic oversight, management, and execution of the common procurement framework, including the decision to launch procedures and award contracts.

Detail

The proposed Cloud and AI Development Act (CADA), COM(2026) 502 final, introduces a mechanism for the Commission to act as a central purchasing body for data centre services, cloud computing services, software, and AI systems. This framework, detailed in Title IV, Chapter IV, allows the Commission to procure on behalf of Member States' contracting authorities, Union entities, and selected partner organisations to leverage collective purchasing power and accelerate the adoption of sovereign technologies.

A key feature of this framework is the provision of ancillary support to participating entities. Article 37(4) explicitly enumerates the types of support the Commission may provide, including:

  • Technical infrastructure enabling the use of awarded contracts;
  • Advice and support on preparing and implementing procurement procedures;
  • The preparation and conduct of procurement procedures on behalf of entities;
  • Invoicing and other administrative services.

Crucially, the proposal recognises that the Commission may not possess all the necessary operational resources in-house to deliver these services efficiently. Therefore, Article 37(5) establishes a flexible delivery model, stating:

"Such ancillary support may be provided directly by the Commission, through a subcontractor, or by delegation to Union bodies or agencies."

This provision allows the Commission to leverage the specific expertise of existing Union bodies (such as executive agencies) or to engage private sector subcontractors for specialized tasks like platform development or technical market analysis.

However, the proposal draws a sharp distinction between the delivery of support and the responsibility for the procurement framework. The delegation of tasks is operational, not a transfer of authority. Article 38(3) reinforces this by mandating that:

"The Commission shall remain responsible for the operation and management of procurement activities, including for deciding on the launch of a procurement procedure, the type of procedure and of contract, and the award of contracts."

Furthermore, the governance structure ensures strategic oversight remains with the Commission and Member States. Article 38(4) establishes a Steering Committee composed of the Commission and representatives of participating Member States. While this committee provides strategic oversight and approves the strategic direction of procurement agendas, the operational management and the final decision-making powers regarding the procurement process remain vested in the Commission.

Consequently, if the Commission delegates the management of the technical platform to an executive agency or the preparation of tender documents to a subcontractor, the Commission remains the legal entity accountable for the integrity of the procedure. Any failure in the delegated task would still be attributed to the Commission's management of the framework. This structure ensures that while the execution can be agile and resource-efficient, the political and legal accountability for the use of EU funds and adherence to public procurement rules remains centralized.

What this means for you

For legal counsel, procurement officers, and compliance teams within public sector bodies or private entities participating in the CADA common procurement framework, this delegation mechanism has specific implications:

  1. Single Point of Accountability: Regardless of which Union body or subcontractor is physically delivering a service (e.g., managing the IT platform or handling invoicing), your primary contractual and legal relationship for the procurement procedure remains with the Commission. If disputes arise regarding the conduct of the procedure or the interpretation of the framework agreement, the Commission is the entity with the final decision-making power under Article 38(3).
  2. Operational Continuity: The ability to delegate to Union bodies or agencies suggests that the Commission may integrate CADA procurement support into existing EU digital infrastructures or administrative workflows. Participants should anticipate that ancillary services might be delivered through established EU platforms managed by agencies with specific mandates in digital or defence sectors.
  3. Data Security and Compliance: When ancillary support involves processing sensitive procurement data, the delegated entity (whether an agency or a subcontractor) must adhere to the same high cybersecurity and data protection standards required of the Commission. The CADA framework emphasises the need for secure and resilient provision of services, and this obligation extends to all delegated support functions.
  4. Strategic Oversight: While operational tasks may be delegated, strategic decisions are overseen by the Steering Committee under Article 38(4). Participants should monitor the strategic direction set by this committee, as it influences the types of procedures launched and the ancillary services prioritized, ensuring alignment with the broader CADA objectives.

Common misconceptions

  • "Delegation means the Commission steps back." This is incorrect. Article 37(5) allows for the delivery of support to be delegated, but Article 38(3) explicitly states the Commission remains responsible for the operation and management of procurement activities. The Commission does not abdicate its role as the central purchasing body.

  • "Any EU agency can automatically provide support." Delegation is a discretionary power of the Commission ("may be provided... by delegation"). It is not an automatic right for any Union body. The Commission will likely delegate based on the specific expertise and mandate of the agency in question, ensuring alignment with the CADA's objectives and the specific needs of the procurement activity.

  • "Subcontractors and agencies have the same status." While both are permitted under Article 37(5), Union bodies/agencies operate within the public institutional framework, whereas subcontractors are private entities. The legal and compliance frameworks governing their engagement will differ, particularly regarding liability, data protection, and the specific rules of the Financial Regulation applicable to each.

Related

This is general information about a draft EU regulation, not legal advice.