Summary A non-EU bidder could theoretically challenge a cloud procurement award influenced by the proposed Cloud and AI Development Act (CADA), but the Regulation's design severely limits the success of such challenges. Article 32(2) establishes four strict legal guardrails, most notably the requirement that Union added value criteria be "ancillary and not decisive" in the award decision. This structural limitation is intended to prevent the criterion from acting as a de facto barrier to trade, thereby insulating the measure from successful challenges under the WTO Government Procurement Agreement (GPA) or EU public procurement law. A successful challenge would likely depend not on contesting the existence of the criterion, but on proving that a contracting authority violated these specific guardrails—specifically by allowing the Union added value score to override technical or financial merit.

Detail

The proposed Cloud and AI Development Act (CADA), COM(2026) 502 final, introduces a novel mechanism for public authorities to favor European digital supply chains through "Union added value" award criteria. For non-EU bidders, particularly those from WTO GPA member states, understanding the precise legal boundaries of this criterion is critical for assessing the viability of a challenge. The primary legal framework governing this mechanism is found in Article 32 of the proposal, which balances the EU's strategic autonomy objectives with its international trade obligations.

The Legal Guardrails of Article 32

Article 32 mandates that contracting authorities include non-price award criteria to evaluate a tenderer's contribution to the European cloud and AI ecosystem. However, the provision is not a blanket license to exclude non-EU entities. Instead, it imposes four cumulative conditions that act as strict legal guardrails against successful challenges. Under Article 32(2), these non-price award criteria must:

  1. Be linked to the subject matter of the contract (Article 32(2)(a)).
  2. Not confer unrestricted freedom of choice on the contracting authority (Article 32(2)(b)).
  3. Be expressly set out in the procurement documents or in the contract notice (Article 32(2)(c)).
  4. Be ancillary and not decisive in the award of the contract (Article 32(2)(d)).

The fourth condition is the most significant for non-EU bidders and the primary defense against claims of discrimination. By explicitly stating that the Union added value criterion must be "ancillary and not decisive," the legislation attempts to preempt claims that the criterion constitutes disguised discrimination or a disproportionate restriction on market access. If a contracting authority allows the Union added value score to override technical or financial merit, or if it becomes the primary factor in the award decision, the authority breaches Article 32(2)(d). This breach provides a concrete, actionable legal basis for a non-EU bidder to challenge the award in national courts.

WTO GPA and EU Public Procurement Law Intersections

A challenge by a non-EU bidder would likely rely on the intersection of CADA, the EU Public Procurement Directives, and international trade agreements, particularly the WTO Government Procurement Agreement (GPA).

WTO GPA Compliance and the Public Order Exception The EU is a signatory to the GPA, which generally prohibits discrimination against suppliers from other GPA member countries. A non-EU bidder could argue that a Union added value criterion inherently discriminates against non-EU suppliers by favoring EU-designed or manufactured components. However, the CADA proposal explicitly anticipates this legal friction. Recital 64 of the explanatory memorandum notes that the Union retains the right, in accordance with Article III:2(a) of the WTO GPA, to adopt or maintain measures necessary to protect public morals, order, or safety. The proposal frames the Union added value criteria as a necessary response to risks such as critical dependencies, unauthorized access, and service disruption, which are fundamental to preserving Union public order.

Furthermore, the "ancillary" nature of the criterion is designed to demonstrate that the measure is not a quantitative restriction on trade but a quality-based evaluation that remains subordinate to core performance criteria. A challenge would need to prove that the implementation of the criterion effectively nullified the bidder's chance of winning, thereby violating the principle of non-discrimination. The EU's defense would rest on the argument that the criterion is a proportionate measure to safeguard public order, as permitted under the GPA's exception clause.

EU Public Procurement Directives Under existing EU law, award criteria must be linked to the subject matter of the contract and cannot confer unrestricted freedom of choice. Article 32(2)(a) and (b) mirror these existing requirements, ensuring that CADA does not create a legal vacuum but rather reinforces established principles with specific cloud-sector objectives. A non-EU bidder could challenge an award if the Union added value criterion was not clearly defined in the tender documents (violating Article 32(2)(c)) or if the evaluation methodology was opaque. However, because CADA explicitly integrates this criterion into the regulatory framework, it provides a level of legal certainty that was previously lacking. The challenge would shift from questioning the legality of the criterion's existence to questioning its application.

The "Ancillary and Not Decisive" Limit

The phrase "ancillary and not decisive" is the cornerstone of the CADA approach to limiting legal exposure. In practice, this means that while a bidder can score points for using EU-designed hardware or software, those points cannot outweigh the technical quality or financial offer.

For example, if a non-EU bidder offers a technically superior solution at a lower price but scores lower on Union added value due to its reliance on non-EU components, they cannot successfully challenge the award if the EU bidder's higher Union added value score was insufficient to overcome the non-EU bidder's lead in technical and financial criteria. The criterion is "ancillary" because it supplements, rather than supersedes, the primary evaluation metrics.

However, if the weighting of the Union added value criterion is set too high, it may become "decisive." While CADA does not specify a hard maximum percentage in the operative articles, the explanatory memorandum provides specific guidance to prevent this breach. Recital 67 states that contracting authorities could consider a maximum weighting of 15 out of 120 points to be allocated to European added value within the overall evaluation methodology. This guidance helps authorities avoid crossing the line into decisiveness. A non-EU bidder could challenge an award if the weighting effectively made the Union added value criterion the tie-breaker or the primary determinant of the outcome, thereby violating the "ancillary" requirement.

Procedural Avenues for Challenge

A non-EU bidder facing an adverse award decision has several procedural avenues, each with distinct strategic implications:

  1. National Review Procedures: Under EU public procurement law, bidders have the right to standstill periods and review procedures at the national level. A bidder can argue that the contracting authority failed to comply with Article 32(2) by making the Union added value criterion decisive or by applying it discriminatorily. This is the most direct and immediate avenue. The burden of proof lies with the challenger to demonstrate that the criterion was applied in a way that violated the "ancillary" condition.
  2. GPA Dispute Settlement: If the national review fails, a bidder from a GPA member state could escalate the issue to the WTO GPA dispute settlement mechanism. This would be a complex and lengthy process, requiring proof that the measure violates the EU's obligations under the agreement. The EU's defense would rely on the "ancillary" nature of the criterion and the public order justification under Article III:2(a) of the GPA. Success here would depend on whether the WTO panel accepts that the specific weighting and application of the criterion were necessary and proportionate to the public order objective.
  3. EU Court of Justice (CJEU): In cases involving the interpretation of EU law, national courts may refer questions to the Court of Justice of the European Union (CJEU). A non-EU bidder could argue that the application of Article 32 violates the principle of non-discrimination enshrined in EU law. However, given that CADA is a proposed regulation specifically designed to address these concerns and align with international obligations, the CJEU would likely defer to the legislative intent, provided the "ancillary" condition is strictly adhered to. The Court would likely focus on whether the specific implementation in the tender breached the statutory limits.

What this means for you

For in-house counsel and compliance officers at non-EU firms bidding on EU public sector cloud contracts, the introduction of CADA requires a proactive compliance strategy. The goal is not to prevent the use of the criterion, but to ensure its application remains within the legal guardrails.

  • Scrutinize Tender Documents: Carefully review the weighting of the Union added value criterion. If the weighting appears to make the criterion decisive (e.g., exceeding the suggested 15/120 points or acting as a tie-breaker), document this as a potential breach of Article 32(2)(d). This documentation is crucial for any subsequent challenge.
  • Challenge Application, Not Existence: Focus challenges on how the criterion was applied rather than its existence. Argue that the contracting authority failed to link the criterion to the subject matter (Article 32(2)(a)) or conferred unrestricted freedom of choice (Article 32(2)(b)). Challenging the existence of the criterion itself is likely to fail given the public order justification.
  • Leverage the "Ancillary" Defense: If your bid is technically superior but loses due to Union added value, demonstrate that the criterion became decisive. Show that the EU bidder's advantage in Union added value outweighed your lead in technical and financial criteria, thereby violating the ancillary requirement.
  • Monitor GPA Developments: Stay informed on any WTO GPA disputes related to CADA. Early case law will shape the interpretation of "ancillary and not decisive" and the scope of the public order justification.
  • Engage in Pre-Tender Dialogues: Use preliminary market consultations to clarify how the Union added value criterion will be evaluated. Seek transparency on the specific metrics used to assess "EU-designed or manufactured" components to ensure the evaluation is not arbitrary.

Common misconceptions

  • Misconception: CADA allows EU bidders to win solely on Union added value.
    • Reality: Article 32(2)(d) explicitly states that the criterion must be "ancillary and not decisive." It cannot override technical or financial merit. A win based solely on this criterion would be a clear breach of the Regulation.
  • Misconception: Non-EU bidders are automatically excluded from scoring Union added value.
    • Reality: While the criterion favors EU components, non-EU bidders may still score points if they integrate technologies developed in the Union or contribute to strengthening the EU digital supply chain, as per Article 32(3)(a)-(d). The criteria are not limited to the bidder's nationality but to the origin of the technology and the supply chain contribution.
  • Misconception: CADA violates the WTO GPA.
    • Reality: The proposal is designed to comply with the GPA by limiting the criterion's weight and linking it to public order and security of supply. The "ancillary" requirement is a key compliance feature intended to ensure the measure is proportionate.
  • Misconception: Challenges are easily won.
    • Reality: Courts will likely defer to the contracting authority's discretion unless there is clear evidence of a breach of Article 32(2). The burden of proof lies with the challenger to demonstrate that the criterion was applied decisively or discriminatorily. The legislative intent to protect public order provides a strong defense for the EU.

Related

This is general information about a draft EU regulation, not legal advice.